Skip to main content

CISA alerts on Retell AI API vulnerability enabling excessive AI agent permissions

Source Decision Insights Threat Desk Published December 1, 2025 Companies 2
Human View Machine View

2 companies named across 4 categories, one of 19 articles referencing OpenAI. Previous coverage: Dell’Oro Group reports on overlapping AI data center buildout announcements and capacity challenges (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Practitioner
Decision stage
Where to buy
Adoption curve
Early Majority
Industry
Information Technology / Software & Services / IT Services / Internet Services & Infrastructure

Our classification, not the publisher's statement. Best suited for, not only for.

Retell Artificial Intelligence (AI)'s Application Programming Interface (API) for creating AI voice agents contains a vulnerability characterized by excessive permissions and capabilities due to inadequate guardrails, enabling potential exploitation through large-scale social engineering, phishing, and misinformation operations.

Retell AI utilizes OpenAI's Generative Pre-trained Transformer (GPT) 4o and 5 models to facilitate conversational AI voice agents, allowing users to configure these agents with limited prompt engineering. The vulnerability arises from insufficient guardrails—mechanisms designed to control inputs and outputs to ensure the Large Language Model (LLM) acts within intended ethical bounds. This deficiency permits AI voice agents to operate with over-permissive autonomy, a condition termed Excessive Agency. Attackers with minimal skills and resources can leverage this to gain trust, extract information, and automate high-volume phishing attacks via Retell AI's platform.

The vulnerability exploits the platform's easy deployment and agent customization to generate automated, large-scale fake calls using publicly sourced data and specific instructions submitted to the Retell AI API. Such fake calls have the potential to facilitate unauthorized activities, security breaches, data exposure, and various manipulations.

Retell AI has not provided a public statement regarding this issue despite efforts for coordinated vulnerability disclosure. Users are advised to exercise caution when interacting with AI voice agents, especially by refraining from sharing sensitive information. Developers are encouraged to implement stricter guardrails that limit agent functionality and permissions and to require human oversight for tasks categorized as high risk or involving substantial volume.

This advisory acknowledges the contribution of reporter Keegan Parr, with the disclosure documentation available via the provided source. The article was prepared by Ayushi Kriplani.

Blog post, originally published by Ayushi Kriplani at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-alerts-on-retell-ai-api-vulnerability-enabling-excessive-ai-agent-permissions/",
        "name": "CISA alerts on Retell AI API vulnerability enabling excessive AI agent permissions",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-alerts-on-retell-ai-api-vulnerability-enabling-excessive-ai-agent-permissions/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/openai/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/openai/",
      "name": "OpenAI"
    },
    "articleSection": [
      "Artificial Intelligence",
      "Cybersecurity"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Practitioner"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Internet Services & Infrastructure"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T22:00:12-06:00",
    "datePublished": "2025-12-01T14:16:55-07:00",
    "description": "Retell AI's API vulnerability allows excessive AI voice agent permissions, enabling automated large-scale phishing and unauthorized actions.",
    "headline": "CISA alerts on Retell AI API vulnerability enabling excessive AI agent permissions",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Ayushi Kriplani"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/649739"
    },
    "keywords": [
      "Phishing",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-alerts-on-retell-ai-api-vulnerability-enabling-excessive-ai-agent-permissions/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-24",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/openai/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/openai/",
        "name": "OpenAI"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages