The WhisperPair vulnerability affects Google's Fast Pair protocol implementation in Bluetooth audio devices. The flaw stems from improper implementation where devices fail to enforce the specification requirement to ignore pairing requests when not in pairing mode. Attackers can exploit this by sending Fast Pair messages to vulnerable accessories, receiving replies from devices that should have ignored the requests, and then completing regular Bluetooth pairing. The attack works from up to 14 meters away within seconds without user interaction. Once paired, attackers gain complete control over the audio device and can add unpaired devices to their Google account for location tracking via Google's Find Hub network.