What’s Vulnerable › Products
baptisteArno typebot.io vulnerabilities
36 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 33 published in the last 12 months.
Check whether your baptisteArno typebot.io version is affected
Latest baptisteArno typebot.io vulnerabilities
- CVE-2026-62865 — TypeBot: Arbitrary server file read via Send Email block attachment path (CVSS 8.7)
- CVE-2026-62862 — TypeBot: Account takeover via brute-forceable 6-digit magic-link code (CVSS 9.1)
- CVE-2026-62861 — TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain (CVSS 6.4)
- CVE-2026-48765 — TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding (CVSS 9.9)
- CVE-2026-48763 — TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath (CVSS 8.2)
- CVE-2026-48762 — TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler (CVSS 5.4)
- CVE-2026-48767 — Google Sheets OAuth access token disclosure to guest members via getAccessToken (CVSS 7.6)
- CVE-2026-48494 — TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session ids (CVSS 7.1)
- CVE-2026-47705 — TypeBot vulnerable to CSV injection in result export (CVSS 9.6)
- CVE-2026-48483 — TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot server (CVSS 5.4)
- CVE-2026-47704 — TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session (CVSS 7.1)
- CVE-2026-48766 — TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl (CVSS 7.6)
- CVE-2026-48495 — TypeBot Google Sheets OAuth callback can create credentials in unauthorized workspaces and modify arbitrary typebots (CVSS 7.1)
- CVE-2026-42142 — TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential Access (CVSS 7.1)
- CVE-2026-47702 — TypeBot API tokens stored in plaintext (CVSS 9.1)
- CVE-2026-49213 — TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution (CVSS 8.1)
- CVE-2026-48768 — TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName (CVSS 9.3)
- CVE-2026-48764 — TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass (CVSS 8.2)
- CVE-2026-48759 — TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion) (CVSS 7.1)
- CVE-2026-39970 — TypeBot: Stored Cross-Site Scripting (XSS) via SVG File Upload On Profile Picture Form (CVSS 8.5)
- CVE-2026-39969 — TypeBot: WhatsApp Webhook Endpoint Missing Signature Verification (CVSS 6.5)
- CVE-2026-39968 — TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint (CVSS 7.1)
- CVE-2026-39967 — TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter (CVSS 3.1)
- CVE-2026-39966 — TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions (CVSS 6.5)
- CVE-2026-39965 — TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks (CVSS 7.7)