CVE-2026-47704

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue.

CVSS

No CVSS.

References

Link	Resource
https://github.com/baptisteArno/typebot.io/commit/6f915c3096bd43d4a913f0f2c7a92e8463f81a86
https://github.com/baptisteArno/typebot.io/pull/2494
https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0
https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h67g-6q6g-58cj

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) TypeBot es una herramienta de creación de chatbots. Antes de la versión 3.17.0, un usuario autenticado que tiene acceso de lectura a cualquier typebot puede reanudar una sesión de webhook en espera que pertenece a un typebot diferente mezclando un ’typebotId’ y ’blockId’ autorizados y un ’resultId’ en vivo ajeno. El gestor de reanudación del webhook autoriza primero el typebot padre, pero luego resuelve el ’result’ descendiente solo por ’resultId’. Como resultado, un atacante puede inyectar JSON de webhook arbitrario en la sesión suspendida de otro typebot y avanzar su ejecución sin ningún acceso al typebot víctima. La versión 3.17.0 corrige el problema.

Information

Published : 2026-08-11 17:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-47704

Mitre link : CVE-2026-47704

CVE.ORG link : CVE-2026-47704

JSON object : View

Products Affected

No product.

CWE

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2026-47704", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47704", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-12T22:07:53.685607Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "baptisteArno", "product": "typebot.io", "versions": [{"status": "affected", "version": "< 3.17.0"}]}]}], "published": "2026-08-11T17:17:59.237", "references": [{"url": "https://github.com/baptisteArno/typebot.io/commit/6f915c3096bd43d4a913f0f2c7a92e8463f81a86", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/pull/2494", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h67g-6q6g-58cj", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue."}, {"lang": "es", "value": "TypeBot es una herramienta de creaci\u00f3n de chatbots. Antes de la versi\u00f3n 3.17.0, un usuario autenticado que tiene acceso de lectura a cualquier typebot puede reanudar una sesi\u00f3n de webhook en espera que pertenece a un typebot diferente mezclando un \u2019typebotId\u2019 y \u2019blockId\u2019 autorizados y un \u2019resultId\u2019 en vivo ajeno. El gestor de reanudaci\u00f3n del webhook autoriza primero el typebot padre, pero luego resuelve el \u2019result\u2019 descendiente solo por \u2019resultId\u2019. Como resultado, un atacante puede inyectar JSON de webhook arbitrario en la sesi\u00f3n suspendida de otro typebot y avanzar su ejecuci\u00f3n sin ning\u00fan acceso al typebot v\u00edctima. La versi\u00f3n 3.17.0 corrige el problema."}], "lastModified": "2026-10-23T19:10:00.167", "sourceIdentifier": "security-advisories@github.com"}