CVE-2025-65098: Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-01-22 · updated 2026-06-17
Weakness: CWE-79

Description

Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates their OpenAI keys, Google Sheets tokens, and SMTP passwords. The `/api/trpc/credentials.getCredentials` endpoint returns plaintext API keys without verifying credential ownership. Version 3.13.2 fixes the issue.

Affected products

baptisteArno typebot.io: before 3.13.2 — fixed in 3.13.2

How to fix

Upgrade to a fixed version: baptisteArno typebot.io 3.13.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-65098 or the next vulnerability affects your stack