PT-2026-3944 · Typebot · Typebot

Published

2026-01-22

·

Updated

2026-03-26

·

CVE-2025-65098

CVSS v3.1

7.4

High

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.13.2
Description Typebot, an open-source chatbot builder, has a flaw where client-side script execution can lead to the theft of stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates credentials such as OpenAI keys, Google Sheets tokens, and SMTP passwords. The /api/trpc/credentials.getCredentials endpoint returns plaintext API keys without verifying credential ownership. The vulnerable file is packages/embeds/js/src/features/blocks/logic/script/executeScript.ts. Attackers can craft malicious bot templates to harvest credentials. The issue stems from client-side scripts executing with the victim's authenticated session and the API returning plaintext credentials without authorization checks.
Recommendations Update Typebot to version 3.13.2 or later.

Exploit

Fix

Information Disclosure

Insufficiently Protected Credentials

XSS

Missing Encryption of Sensitive Data

Improper Access Control

Missing Authorization

IDOR

Related Identifiers

CVE-2025-65098
GHSA-4XC5-WFWC-JW47

Affected Products

Typebot