CVE-2026-48765

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth `credentialsId` from a readable bot configuration and then overwrite that credential through `handleUpdateOAuthCredentials()` by supplying an attacker-controlled writable `workspaceId`. The update path validates only the attacker-supplied workspace and then updates the credential record by global `id` alone, while also rewriting the credential's `workspaceId`. This allows cross-workspace OAuth credential takeover and reassignment. Version 3.17.0 patches the issue.

• CWE-639

• https://github.com/baptisteArno/typebot.io/commit/7ae4c007d0987d2ca907b47e1b7418db62b8a157
• https://github.com/baptisteArno/typebot.io/pull/2459
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-3788-7276-x4j4
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-3788-7276-x4j4

Published

Aug 11, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4876A vulnerability was identified in itsourcecode Free Hotel Re…6.3
• CVE-2026-48760Symfony is a PHP framework for web and console applications …6.1
• CVE-2026-48761Symfony is a PHP framework for web and console applications …6.1
• CVE-2026-48762TypeBot is a chatbot builder tool. Prior to version 3.16.0, …5.4
• CVE-2026-48763TypeBot is a chatbot builder tool. Versions prior to 3.17.0 …8.2
• CVE-2026-48764TypeBot is a chatbot builder tool. In versions prior to 3.17…8.2
• CVE-2026-48766TypeBot is a chatbot builder tool. Versions prior to 3.17.0 …7.6
• CVE-2026-48767TypeBot is a chatbot builder tool. Versions prior to 3.17.0 …7.6
• CVE-2026-48768TypeBot is a chatbot builder tool. In versions 3.16.1 and ea…9.3
• CVE-2026-48769Incus is a system container and virtual machine manager. Pri…9.9
• CVE-2026-4877A security flaw has been discovered in itsourcecode Payroll …4.3
• CVE-2026-48770Notepad++ is a free and open-source source code editor. Prio…5