Listen to this Post
How the CVE Works
The vulnerability (CVE-2025-XXXX) in Rasa Pro affects voice connectors (audiocodes_stream, genesys, jambonz) due to improper authentication enforcement despite token configurations in credentials.yml. Attackers can bypass authentication and submit voice data to the Rasa Pro assistant without valid credentials. The issue stems from missing validation checks in the API endpoints handling voice interactions, allowing unauthenticated requests to process voice inputs.
Affected versions include Rasa Pro 3.9.0–3.9.17, 3.10.0–3.10.18, 3.11.0–3.11.6, and 3.12.0–3.12.5. Patched versions enforce proper token validation, preventing unauthorized access.
DailyCVE Form
Platform: Rasa Pro
Version: 3.9.0–3.12.5
Vulnerability: Missing Authentication
Severity: Moderate
Date: Apr 17, 2025
What Undercode Say:
Exploitation
1. Craft Unauthenticated Request:
curl -X POST http://<rasa_pro_host>:5005/webhooks/audiocodes/webhook -H "Content-Type: application/json" -d '{"text":"malicious_input"}'
2. Bypass Token Check:
Intercept voice API traffic and remove/modify `Authorization` headers.
Protection
1. Update Rasa Pro:
pip install --upgrade rasa==3.12.6
2. Verify `credentials.yml`:
audiocodes: token: "secure_random_token"
3. Network Controls:
iptables -A INPUT -p tcp --dport 5005 -s trusted_ip -j ACCEPT
Detection
1. Log Analysis:
grep "Unauthorized voice request" /var/log/rasa/rasa_server.log
2. Patch Check:
pip show rasa | grep Version
Mitigation
1. Disable Affected Connectors:
rasa.yml channels: - name: "rest" Remove vulnerable connectors
2. API Gateway Enforcement:
location /webhooks/ {
auth_request /validate-token;
}
References
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
