Baptistearno Typebot.io vulnerabilities

• baptistearno typebot.io TypeBot: Arbitrary server file read via Send Email block attachment path CVE-2026-62865 8.7 HighAugust 25, 2026
• baptistearno typebot.io TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain CVE-2026-62861 6.4 MediumAugust 25, 2026
• baptistearno typebot.io TypeBot: Account takeover via brute-forceable 6-digit magic-link code CVE-2026-62862 9.1 CriticalAugust 25, 2026
• baptistearno typebot.io TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath CVE-2026-48763 8.2 HighAugust 11, 2026
• baptistearno typebot.io TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler CVE-2026-48762 5.4 MediumAugust 11, 2026
• baptistearno typebot.io TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding CVE-2026-48765 9.9 CriticalAugust 11, 2026
• baptistearno typebot.io TypeBot vulnerable to CSV injection in result export CVE-2026-47705 9.6 CriticalAugust 11, 2026
• baptistearno typebot.io Google Sheets OAuth access token disclosure to guest members via getAccessToken CVE-2026-48767 7.6 HighAugust 11, 2026
• baptistearno typebot.io TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session ids CVE-2026-48494 7.1 HighAugust 11, 2026
• baptistearno typebot.io TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session CVE-2026-47704 7.1 HighAugust 11, 2026
• baptistearno typebot.io TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot server CVE-2026-48483 5.4 MediumAugust 11, 2026
• baptistearno typebot.io TypeBot Google Sheets OAuth callback can create credentials in unauthorized workspaces and modify arbitrary typebots CVE-2026-48495 7.1 HighAugust 11, 2026
• baptistearno typebot.io TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl CVE-2026-48766 7.6 HighAugust 11, 2026
• baptistearno typebot.io TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential Access CVE-2026-42142 7.1 HighAugust 11, 2026
• baptistearno typebot.io TypeBot API tokens stored in plaintext CVE-2026-47702 9.1 CriticalAugust 11, 2026
• baptistearno typebot.io TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution CVE-2026-49213 8.1 HighJuly 10, 2026
• baptistearno typebot.io TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass CVE-2026-48764 8.2 HighJune 17, 2026
• baptistearno typebot.io TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName CVE-2026-48768 9.3 CriticalJune 17, 2026
• baptistearno typebot.io TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion) CVE-2026-48759 7.1 HighJune 17, 2026
• baptistearno typebot.io TypeBot: WhatsApp Webhook Endpoint Missing Signature Verification CVE-2026-39969 6.5 MediumMay 22, 2026
• baptistearno typebot.io TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter CVE-2026-39967 3.1 LowMay 22, 2026
• baptistearno typebot.io TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint CVE-2026-39968 7.1 HighMay 22, 2026
• baptistearno typebot.io TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions CVE-2026-39966 6.5 MediumMay 22, 2026
• baptistearno typebot.io TypeBot: Stored Cross-Site Scripting (XSS) via SVG File Upload On Profile Picture Form CVE-2026-39970 8.5 HighMay 22, 2026
• baptistearno typebot.io TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks CVE-2026-39965 7.7 HighMay 22, 2026
• baptistearno typebot.io TypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsers CVE-2026-39964 Fix available 5.4 MediumMay 22, 2026
• baptistearno typebot.io TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation CVE-2026-34207 Public exploit 7.6 HighMay 22, 2026
• baptistearno typebot.io TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls CVE-2026-33712 10.0 CriticalMay 22, 2026
• baptistearno typebot.io Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview CVE-2026-28445 Fix available 8.7 HighMay 22, 2026
• baptistearno typebot.io Typebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure CVE-2026-28444 6.5 MediumMay 22, 2026
• typebot, baptistearno typebot.io +1 more Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass CVE-2025-65098 Fix available 7.4 HighJanuary 22, 2026
• typebot, baptistearno typebot.io +1 more Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block CVE-2025-64709 9.6 CriticalNovember 13, 2025
• typebot, baptistearno typebot.io +1 more Typebot IDOR Vulnerability: Unauthorized API Token Deletion and Exposure CVE-2025-64706 5.0 MediumNovember 13, 2025
• baptistearno typebot.io, typebot +1 more typebot.io: `GHSL-2024-040` CVE-2024-30264 8.1 HighApril 4, 2024