Read the docs
TI-2026-35857 Aliases CVE-2026-48495

TypeBot Google Sheets OAuth callback can create credentials in unauthorized workspaces and modify arbitrary typebots

Priority MEDIUM 64CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON `state` parameter and trusts the embedded `workspaceId`, `typebotId`, `blockId`, and `redirectUrl` without cryptographic integrity protection or authorization checks. The callback route is authenticated, but it does not verify that the authenticated user has write access to the target workspace or Typebot before creating credentials in the workspace or updating Typebot groups. An authenticated user who can obtain a valid Google OAuth `code` can alter the `state` value to create Google Sheets credentials in another workspace and, if target IDs are known, attach those credentials to a block in another Typebot. Version 3.17.0 patches the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00351 28th percentileScored 2026-11-07
Fix Fixed typebot.io (baptisteArno): 3.17.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
baptisteArnotypebot.iobefore 3.17.03.17.0Patch availableCNA
  • typebot.io VendorbaptisteArno Affected before 3.17.0 Fixed in 3.17.0 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:typebot:typebot:*:*:*:*:*:*:*:*——baptisteArno
  • cpe:2.3:a:typebot:typebot:*:*:*:*:*:*:*:* Versions — — ·baptisteArno

Remediation

  • Fix · CNA typebot.io (baptisteArno) Fixed in 3.17.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-48495

References

Other 4

  • TI-2026-26091 TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls CVSS 3.1CRITICAL 10.0
  • TI-2026-36038 TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName CVSS 3.1CRITICAL 9.3
  • TI-2026-44929 TypeBot: Arbitrary server file read via Send Email block attachment path CVSS 4.0HIGH 8.7
  • TI-2026-36035 TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding CVSS 3.1CRITICAL 9.9
  • TI-2026-35208 TypeBot vulnerable to CSV injection in result export CVSS 3.1CRITICAL 9.6
  • TI-2025-40055 Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block CVSS 3.1CRITICAL 9.9
See all 35 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences