Rasa Pro Missing Authentication For Voice Connector APIs
Vulnerability
A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source.
This impacts the following connectors:
audiocodes_streamgenesysjambonz
As part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:
browser_audio: Does not support authentication. This is a development channel not intended for production use.twilio_media_streams,twilio_voiceandjambonz: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.
Fix
The issue has been resolved for audiocodes, audiocodes_stream, and genesys connectors. Fixed versions of Rasa Pro have been released for 3.9.20, 3.10.19, 3.11.7 and 3.12.6. Please update to a fixed release.
If you are using one of the affected connectors, we strongly recommend upgrading to a fixed version. For connectors where authentication is not supported (e.g., Twilio), we suggest taking extra caution and considering other compensating controls if applicable.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| Python (PyPI) | rasa-pro | >= 3.12.0, < 3.12.6, >= 3.11.0, < 3.11.7, >= 3.10.0, < 3.10.19, < 3.9.20 | 3.12.6, 3.11.7, 3.10.19, 3.9.20 |
References
- https://github.com/RasaHQ/rasa-pro-security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg
- https://github.com/RasaHQ/security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg
- https://nvd.nist.gov/vuln/detail/CVE-2025-32377
- https://pypi.org/project/rasa-pro
- https://github.com/advisories/GHSA-7xq5-54jp-2mfg
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L- Weakness (CWE)
CWE-306- Platform
- Python (PyPI)
- Package
rasa-pro- Disclosed
- 17.04.2025
- Updated
- 11.10.2026 13:19
Sources and licenses
OSV / GitHub Advisory Database - PYSEC-2026-1862 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-7xq5-54jp-2mfg - CC BY 4.0
Vulnerability history: rasa-pro
All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 2
- First → latest
- 01.2025 04.2025
- Without a fix
- 0
- Exploited in attacks
- 0
Severity breakdown
- Critical 1
- Medium 1
Disclosures per year
- 2025: 2
- 2026: 0
-
Rasa Pro Missing Authentication For Voice Connector APIs this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.