TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential Access
Priority MEDIUM 64CWE-862Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.
Summary
TypeBot is a chatbot builder tool. Prior to version 3.17.0, the `handleGetSheets` API handler (`POST /api/sheets/getSheets`) does not validate workspace membership, allowing any authenticated user to access and decrypt another workspace's Google Sheets OAuth credentials and retrieve spreadsheet data (sheet names, IDs, column headers). Version 3.17.0 fixes the issue.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00369 30th percentileScored 2026-11-07
Fix Fixed typebot.io (baptisteArno): 3.17.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| baptisteArno | typebot.io | before 3.17.0 | 3.17.0 | Patch available | CNA |
- typebot.io VendorbaptisteArno Affected before 3.17.0 Fixed in 3.17.0 Patch available CNA
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:typebot:typebot:*:*:*:*:*:*:*:* | — | — | baptisteArno |
- cpe:2.3:a:typebot:typebot:*:*:*:*:*:*:*:* Versions — — ·baptisteArno
Remediation
- Fix · CNA typebot.io (baptisteArno) Fixed in 3.17.0
Timeline
- 2026-10-02 Threatist record created from CVE-2026-42142
References
More baptisteArno vulnerabilities
- TI-2026-26091 TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls CVSS 3.1CRITICAL 10.0
- TI-2026-36038 TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName CVSS 3.1CRITICAL 9.3
- TI-2026-44929 TypeBot: Arbitrary server file read via Send Email block attachment path CVSS 4.0HIGH 8.7
- TI-2026-36035 TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding CVSS 3.1CRITICAL 9.9
- TI-2026-35208 TypeBot vulnerable to CSV injection in result export CVSS 3.1CRITICAL 9.6
- TI-2025-40055 Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block CVSS 3.1CRITICAL 9.9
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences