RasaHQ — Vulnerabilities & Security Advisories 3

RasaHQ develops open-source conversational AI platforms for building chatbots and virtual assistants. Historically, the project has faced vulnerabilities including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from improper input validation and authentication bypasses. While no major public security incidents have been widely documented, the three CVEs on record highlight potential risks in production deployments. Security researchers have identified issues in components like Rasa X and the webchat interface, emphasizing the need for regular updates and input sanitization when deploying these conversational systems in security-sensitive environments.