Vulnerability-Lookup

PYSEC-2026-1862

Vulnerability from pysec - Published: 2026-07-07 16:02 - Updated: 2026-07-07 17:25

Details

Vulnerability

A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source.

This impacts the following connectors:

audiocodes_stream
genesys
jambonz

As part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:

browser_audio: Does not support authentication. This is a development channel not intended for production use.
twilio_media_streams, twilio_voice and jambonz: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.

Fix

The issue has been resolved for audiocodes, audiocodes_stream, and genesys connectors. Fixed versions of Rasa Pro have been released for 3.9.20, 3.10.19, 3.11.7 and 3.12.6. Please update to a fixed release.

If you are using one of the affected connectors, we strongly recommend upgrading to a fixed version. For connectors where authentication is not supported (e.g., Twilio), we suggest taking extra caution and considering other compensating controls if applicable.

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Impacted products

Name	purl
rasa-pro	pkg:pypi/rasa-pro

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "rasa-pro",
        "purl": "pkg:pypi/rasa-pro"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.9.20"
            },
            {
              "introduced": "3.10.0"
            },
            {
              "fixed": "3.10.19"
            },
            {
              "introduced": "3.11.0"
            },
            {
              "fixed": "3.11.7"
            },
            {
              "introduced": "3.12.0"
            },
            {
              "fixed": "3.12.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.0.1",
        "0.0.1.post1",
        "3.10.10",
        "3.10.11",
        "3.10.12",
        "3.10.13",
        "3.10.13a1",
        "3.10.14",
        "3.10.15",
        "3.10.16",
        "3.10.17",
        "3.10.18",
        "3.10.3",
        "3.10.4",
        "3.10.5",
        "3.10.6",
        "3.10.7",
        "3.10.7.dev1",
        "3.10.7.dev2",
        "3.10.7.dev3",
        "3.10.7.dev4",
        "3.10.7.dev5",
        "3.10.8",
        "3.10.9",
        "3.10.9.dev1",
        "3.11.0",
        "3.11.1",
        "3.11.2",
        "3.11.3",
        "3.11.3a1.dev1",
        "3.11.3a1.dev2",
        "3.11.3a1.dev4",
        "3.11.3a1.dev5",
        "3.11.3a1.dev6",
        "3.11.3a1.dev7",
        "3.11.4",
        "3.11.5",
        "3.11.6",
        "3.12.0",
        "3.12.1",
        "3.12.1.dev1",
        "3.12.1.dev2",
        "3.12.2",
        "3.12.2.dev2",
        "3.12.2.dev3",
        "3.12.2.dev4",
        "3.12.3",
        "3.12.4",
        "3.12.5",
        "3.12.6.dev1",
        "3.12.6.dev2",
        "3.8.16",
        "3.8.17",
        "3.8.18",
        "3.9.14",
        "3.9.15",
        "3.9.16",
        "3.9.17",
        "3.9.18",
        "3.9.19"
      ]
    }
  ],
  "aliases": [
    "CVE-2025-32377",
    "GHSA-7xq5-54jp-2mfg"
  ],
  "details": "## Vulnerability\nA vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the `credentials.yml` file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source.\n\nThis impacts the following connectors:\n\n- `audiocodes_stream`\n- `genesys`\n- `jambonz`\n\nAs part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:\n\n- `browser_audio`: Does not support authentication. This is a development channel not intended for production use.\n- `twilio_media_streams`, `twilio_voice` and `jambonz`: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.\n\n## Fix\nThe issue has been resolved for `audiocodes`, `audiocodes_stream`, and `genesys` connectors. Fixed versions of Rasa Pro have been released for `3.9.20`, `3.10.19`, `3.11.7` and `3.12.6`. Please update to a fixed release.\n\nIf you are using one of the affected connectors, we strongly recommend upgrading to a fixed version. For connectors where authentication is not supported (e.g., Twilio), we suggest taking extra caution and considering other compensating controls if applicable.",
  "id": "PYSEC-2026-1862",
  "modified": "2026-07-07T17:25:15.931919Z",
  "published": "2026-07-07T16:02:51.197156Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/RasaHQ/rasa-pro-security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg"
    },
    {
      "type": "WEB",
      "url": "https://github.com/RasaHQ/security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32377"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/rasa-pro"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-7xq5-54jp-2mfg"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Rasa Pro Missing Authentication For Voice Connector APIs"
}

CVE-2025-32377 (GCVE-0-2025-32377)

Vulnerability from cvelistv5 – Published: 2025-04-18 19:59 – Updated: 2025-04-18 20:35

Title

Rasa Pro Missing Authentication For Voice Connector APIs

Summary

Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs). A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source. This issue has been patched for audiocodes, audiocodes_stream, and genesys connectors in versions 3.9.20, 3.10.19, 3.11.7 and 3.12.6.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

GitHub_M

References

1 reference

URL	Tags
https://github.com/RasaHQ/security-advisories/sec…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
RasaHQ	rasa-pro-security-advisories	Affected: >= 3.12.0, < 3.12.6 Affected: >= 3.11.0, < 3.11.7 Affected: >= 3.10.0, < 3.10.19 Affected: < 3.9.20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-32377",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-18T20:35:33.250201Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-18T20:35:41.744Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "rasa-pro-security-advisories",
          "vendor": "RasaHQ",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.12.0, \u003c 3.12.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.11.0, \u003c 3.11.7"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.10.0, \u003c 3.10.19"
            },
            {
              "status": "affected",
              "version": "\u003c 3.9.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs). A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source. This issue has been patched for audiocodes, audiocodes_stream, and genesys connectors in versions 3.9.20, 3.10.19, 3.11.7 and 3.12.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-18T19:59:32.286Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/RasaHQ/security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/RasaHQ/security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg"
        }
      ],
      "source": {
        "advisory": "GHSA-7xq5-54jp-2mfg",
        "discovery": "UNKNOWN"
      },
      "title": "Rasa Pro Missing Authentication For Voice Connector APIs"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-32377",
    "datePublished": "2025-04-18T19:59:32.286Z",
    "dateReserved": "2025-04-06T19:46:02.461Z",
    "dateUpdated": "2025-04-18T20:35:41.744Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

GHSA-7XQ5-54JP-2MFG

Vulnerability from github – Published: 2025-04-17 18:33 – Updated: 2025-04-23 14:34

Summary

Rasa Pro Missing Authentication For Voice Connector APIs

Details

Vulnerability

This impacts the following connectors:

audiocodes_stream
genesys
jambonz

As part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:

browser_audio: Does not support authentication. This is a development channel not intended for production use.
twilio_media_streams, twilio_voice and jambonz: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.

Fix

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 3.12.5"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "rasa-pro"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.12.0"
            },
            {
              "fixed": "3.12.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 3.11.6"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "rasa-pro"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.11.0"
            },
            {
              "fixed": "3.11.7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 3.10.18"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "rasa-pro"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.10.0"
            },
            {
              "fixed": "3.10.19"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 3.9.17"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "rasa-pro"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.9.20"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2025-32377"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-306"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2025-04-17T18:33:20Z",
    "nvd_published_at": "2025-04-18T20:15:16Z",
    "severity": "MODERATE"
  },
  "details": "## Vulnerability\nA vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the `credentials.yml` file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source.\n\nThis impacts the following connectors:\n\n- `audiocodes_stream`\n- `genesys`\n- `jambonz`\n\nAs part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:\n\n- `browser_audio`: Does not support authentication. This is a development channel not intended for production use.\n- `twilio_media_streams`, `twilio_voice` and `jambonz`: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.\n\n## Fix\nThe issue has been resolved for `audiocodes`, `audiocodes_stream`, and `genesys` connectors. Fixed versions of Rasa Pro have been released for `3.9.20`, `3.10.19`, `3.11.7` and `3.12.6`. Please update to a fixed release.\n\nIf you are using one of the affected connectors, we strongly recommend upgrading to a fixed version. For connectors where authentication is not supported (e.g., Twilio), we suggest taking extra caution and considering other compensating controls if applicable.",
  "id": "GHSA-7xq5-54jp-2mfg",
  "modified": "2025-04-23T14:34:46Z",
  "published": "2025-04-17T18:33:20Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/RasaHQ/rasa-pro-security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg"
    },
    {
      "type": "WEB",
      "url": "https://github.com/RasaHQ/security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32377"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Rasa Pro Missing Authentication For Voice Connector APIs"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

PYSEC-2026-1862

Vulnerability

Fix

CVE-2025-32377 (GCVE-0-2025-32377)

GHSA-7XQ5-54JP-2MFG

Vulnerability

Fix

Tags

Sightings

Nomenclature