https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T01:13:21.478545+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231923 EUVD-2026-231923 2026-10-18T01:13:21.482062+00:00 EUVD-2026-231923 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32377 fkie_cve-2025-32377 2026-10-18T01:13:21.482095+00:00

Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs). A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source. This issue has been patched for audiocodes, audiocodes_stream, and genesys connectors in versions 3.9.20, 3.10.19, 3.11.7 and 3.12.6.

 https://cve.radiocsirt.org/vuln/ghsa-7xq5-54jp-2mfg GHSA-7xq5-54jp-2mfg — Rasa Pro Missing Authentication For Voice Connector APIs 2026-10-18T01:13:21.482128+00:00

Affected: PyPI: rasa-pro

## Vulnerability A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the `credentials.yml` file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source.

This impacts the following connectors:

- `audiocodes_stream` - `genesys` - `jambonz`

As part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:

- `browser_audio`: Does not support authentication. This is a development channel not intended for production use. - `twilio_media_streams`, `twilio_voice` and `jambonz`: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.

## Fix The issue has been resolved for `audiocodes`, `audiocodes_stream`, and `genesys` connectors. Fixed versions of Rasa Pro have been released for `3.9.20`, `3.10.19`, `3.11.7` and `3.12.6`. Please update to a fixed release.

If you are using one of the affected connectors, we strongly recommend upgrading to a fixed version. For connectors where authentication is not supported (e.g., Twilio), we suggest taking extra caution and considering other compensating controls if applicable.

 https://cve.radiocsirt.org/vuln/pysec-2026-1862 PYSEC-2026-1862 — Rasa Pro Missing Authentication For Voice Connector APIs 2026-10-18T01:13:21.482166+00:00

Affected: PyPI: rasa-pro

## Vulnerability A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the `credentials.yml` file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source.

This impacts the following connectors:

- `audiocodes_stream` - `genesys` - `jambonz`

As part of our investigation to resolve this issue, we have also performed a security review of our other voice channel connectors:

- `browser_audio`: Does not support authentication. This is a development channel not intended for production use. - `twilio_media_streams`, `twilio_voice` and `jambonz`: Authentication is currently not supported by these channels, but our investigation has found a way for us to enable it for these voice channel connectors in a future Rasa Pro release.

## Fix The issue has been resolved for `audiocodes`, `audiocodes_stream`, and `genesys` connectors. Fixed versions of Rasa Pro have been released for `3.9.20`, `3.10.19`, `3.11.7` and `3.12.6`. Please update to a fixed release.

If you are using one of the affected connectors, we strongly recommend upgrading to a fixed version. For connectors where authentication is not supported (e.g., Twilio), we suggest taking extra caution and considering other compensating controls if applicable.