Origin Validation Error Affecting sipwise/rtpengine package, versions [,13.4.1.1)
Threat Intelligence
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UNMANAGED-SIPWISERTPENGINE-11359666
- published1 Aug 2025
- disclosed1 Aug 2025
- creditEnable Security Team
Introduced: 1 Aug 2025
NewCVE-2025-53399 (opens in a new tab)How to fix?
Upgrade sipwise/rtpengine to version 13.4.1.1 or higher.
Overview
Affected versions of this package are vulnerable to Origin Validation Error via improper origin validation in the endpoint-learning process. An attacker can inject or intercept RTP/SRTP media streams by sending crafted RTP packets.
Note:
This is only exploitable if the relay is not configured for strict source and learning is not disabled.
Workaround
This vulnerability can be mitigated by enabling strict source configuration and disabling endpoint learning. When using SDES-SRTP, it is recommended to use both strict source and recrypt flags for complete protection.