CVE-2026-39968

TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Client-Side Script Execution and API Authorization Bypass") is incomplete. While the builder's getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The bot-engine's getCredentials() utility function uses a falsy check (if (workspaceId && ...)) for workspace ownership validation. Since the preview endpoint accepts a client-controlled workspaceId field and the Zod schema allows empty strings, an attacker can supply workspaceId: "" to bypass credential ownership verification entirely. Exploitation can result in credential exfiltration, external service abuse, financial damage and a data breach.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/baptisteArno/typebot.io/commit/d96f572e6099c5f622c05ba7b8634e6477dcf052
https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0
https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-cq66-9cwr-x8jr
https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-cq66-9cwr-x8jr

Configurations

No configuration.

History

No history.

Information

Published : 2026-05-22 19:17

Updated : 2026-07-23 16:10

NVD link : CVE-2026-39968

Mitre link : CVE-2026-39968

CVE.ORG link : CVE-2026-39968

JSON object : View

Products Affected

No product.

CWE

CWE-284

Improper Access Control

CWE-522

Insufficiently Protected Credentials

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-39968", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-39968", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T13:08:55.483789Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "baptisteArno", "product": "typebot.io", "versions": [{"status": "affected", "version": "< 3.16.0"}]}]}], "published": "2026-05-22T19:17:03.373", "references": [{"url": "https://github.com/baptisteArno/typebot.io/commit/d96f572e6099c5f622c05ba7b8634e6477dcf052", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-cq66-9cwr-x8jr", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-cq66-9cwr-x8jr", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-522"}, {"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 (\"Credential Theft via Client-Side Script Execution and API Authorization Bypass\") is incomplete. While the builder's getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The bot-engine's getCredentials() utility function uses a falsy check (if (workspaceId && ...)) for workspace ownership validation. Since the preview endpoint accepts a client-controlled workspaceId field and the Zod schema allows empty strings, an attacker can supply workspaceId: \"\" to bypass credential ownership verification entirely. Exploitation can result in credential exfiltration, external service abuse, financial damage and a data breach."}, {"lang": "es", "value": "TypeBot es una herramienta de creaci\u00f3n de chatbots. En las versiones 3.15.2 y anteriores, la soluci\u00f3n para GHSA-4xc5-wfwc-jw47 ('Robo de credenciales mediante ejecuci\u00f3n de scripts del lado del cliente y omisi\u00f3n de autorizaci\u00f3n de API') est\u00e1 incompleta. Aunque el endpoint tRPC getCredentials del constructor fue parcheado con verificaciones de membres\u00eda de espacio de trabajo, el tiempo de ejecuci\u00f3n del motor de bots a\u00fan permite a cualquier usuario autenticado usar credenciales de cualquier espacio de trabajo a trav\u00e9s del endpoint de chat de vista previa. La funci\u00f3n de utilidad getCredentials() del motor de bots utiliza una verificaci\u00f3n falsy (si (workspaceId && ...)) para la validaci\u00f3n de la propiedad del espacio de trabajo. Dado que el endpoint de vista previa acepta un campo workspaceId controlado por el cliente y el esquema Zod permite cadenas vac\u00edas, un atacante puede proporcionar workspaceId: '' para omitir completamente la verificaci\u00f3n de propiedad de credenciales. La explotaci\u00f3n puede resultar en exfiltraci\u00f3n de credenciales, abuso de servicios externos, da\u00f1os financieros y una violaci\u00f3n de datos."}], "lastModified": "2026-07-23T16:10:00.137", "sourceIdentifier": "security-advisories@github.com"}