CVE-2026-48494

Summary

TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign preview phone number tied to another preview session. The WhatsApp test-webhook handler authorizes the parent typebot first, but then resolves the preview chat session only by wa-preview-{phone}. As a result, an attacker can inject arbitrary webhook JSON into another workspace's WhatsApp preview session and advance its draft/unpublished flow without any access to the victim typebot. Version 3.17.0 patches the issue.

Affected Software

Weaknesses

• CWE-639: CWE-639: Authorization Bypass Through User-Controlled Key

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-fqf7-mmp5-j3jq

References

• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-fqf7-mmp5-j3jq
• https://github.com/baptisteArno/typebot.io/pull/2499
• https://github.com/baptisteArno/typebot.io/commit/36a618610174fd168fb255d9c8ecc0d2cf61a192
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0

• ←Previous
• Next→