CVE-2026-28445

Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the RatingButton component in the embed package renders the user-controlled customIcon.svg field directly via Solid's innerHTML directive without any sanitization, even though DOMPurify is already a dependency and is used elsewhere in the codebase (e.g., StreamingBubble.tsx). Because rating blocks are not flagged as isUnsafe by the import sanitizer and the builder preview renders bots inline on the builder's own origin (builder.typebot.io) under a CSP permitting 'unsafe-inline', a malicious imported or collaborator-crafted typebot can execute arbitrary HTML/JS in the builder's authenticated context, bypassing the Web Worker sandbox that protects Script blocks during preview. This allows session hijacking and privilege escalation within the builder application. This issue has been fixed in version 3.16.0.

• CWE-79

• https://github.com/baptisteArno/typebot.io/commit/474ecbf46bc47a75265bada2599f12b2179de375
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-6m7c-xfhp-p9fh
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-6m7c-xfhp-p9fh

Published

May 22, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-28436Frappe is a full-stack web application framework. Prior to v…7.2
• CVE-2026-28438CocoIndex is a data transformation framework for AI. Prior t…9.8
• CVE-2026-2844Missing Authentication for Critical Function vulnerability i…7.5
• CVE-2026-28442ZimaOS is a fork of CasaOS, an operating system for Zima dev…8.5
• CVE-2026-28443OpenReplay is a self-hosted session replay suite. Prior to v…9.8
• CVE-2026-28444Typebot is a chatbot builder tool. In versions 3.15.2 and pr…6.5
• CVE-2026-28446OpenClaw versions prior to 2026.2.1 with the voice-call exte…9.8
• CVE-2026-28447OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.1 contain…6.5
• CVE-2026-28448OpenClaw versions 2026.1.29 prior to 2026.2.1 contain a vuln…9.4
• CVE-2026-28449OpenClaw versions prior to 2026.2.25 lack durable replay sta…6.5
• CVE-2026-2845An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2026-28450OpenClaw versions prior to 2026.2.12 with the optional Nostr…8.2