PT-2026-42798 · Typebot · Typebot

CVE-2026-28445 · Published 2026-05-22 · Updated 2026-05-26

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.16.0

Description The RatingButton component in the embed package renders the user-controlled customIcon.svg field directly via Solid's innerHTML directive without sanitization. Because rating blocks are not flagged as isUnsafe by the import sanitizer and the builder preview renders bots inline on the builder's own origin under a Content Security Policy (CSP) permitting 'unsafe-inline', a malicious imported or collaborator-crafted chatbot can execute arbitrary HTML and JavaScript in the builder's authenticated context. This bypasses the Web Worker sandbox that protects Script blocks during preview, potentially leading to session hijacking and privilege escalation within the builder application.

Recommendations Update to version 3.16.0.

Exploit

Fix

LPE

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-28445

GHSA-6M7C-XFHP-P9FH

Affected Products

Typebot

References · 10

• 🔥 https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-6m7c-xfhp-p9fh · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28445.json · Exploit
• https://osv.dev/vulnerability/GHSA-6m7c-xfhp-p9fh · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28445 · Security Note
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 · Note
• https://github.com/baptisteArno/typebot.io/commit/474ecbf46bc47a75265bada2599f12b2179de375 · Note
• https://github.com/baptisteArno/typebot.io · Note
• https://github.com/baptisteArno/typebot.io/blob/v3.16.0/packages/embeds/js/package.json · Note
• https://t.me/CVEtracker/54649 · Telegram Post