https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:11:35 +0000 https://cve.radiocsirt.org/vuln/cve-2026-39968 <p><strong>Affected:</strong> baptisteArno typebot.io</p> <p>TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 (&#34;Credential Theft via Client-Side Script Execution and API Authorization Bypass&#34;) is incomplete. While the builder&#39;s getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The bot-engine&#39;s getCredentials() utility function uses a falsy check (if (workspaceId &amp;&amp; ...)) for workspace ownership validation. Since the preview endpoint accepts a client-controlled workspaceId field and the Zod schema allows empty strings, an attacker can supply workspaceId: &#34;&#34; to bypass credential ownership verification entirely. Exploitation can result in credential exfiltration, external service abuse, financial damage and a data breach.</p> <p><strong>Affected:</strong> baptisteArno typebot.io</p> <p>TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 (&#34;Credential Theft via Client-Side Script Execution and API Authorization Bypass&#34;) is incomplete. While the builder&#39;s getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The bot-engine&#39;s getCredentials() utility function uses a falsy check (if (workspaceId &amp;&amp; ...)) for workspace ownership validation. Since the preview endpoint accepts a client-controlled workspaceId field and the Zod schema allows empty strings, an attacker can supply workspaceId: &#34;&#34; to bypass credential ownership verification entirely. Exploitation can result in credential exfiltration, external service abuse, financial damage and a data breach.</p> https://cve.radiocsirt.org/vuln/cve-2026-39968