PT-2026-50564 · Baptistearno · Typebot.Io
Published
2026-06-17
·
Updated
2026-06-18
·
CVE-2026-48759
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
TypeBot versions prior to 3.16.0
Steeltoe (affected versions not specified)
Description
TypeBot contains an Insecure Direct Object Reference (IDOR) issue—a flaw where an application provides direct access to objects based on user-supplied input—allowing authenticated users to modify or delete theme templates from other workspaces. The
handleSaveThemeTemplate and handleDeleteThemeTemplate handlers verify that a user is a non-guest member of a workspace, but the subsequent Prisma queries using themeTemplateId fail to include the workspaceId in the filter, enabling unauthorized cross-workspace actions. Template IDs may be exposed through network traffic or shared typebots.Steeltoe writes TLS private keys to the
/tmp directory, exposing sensitive data and compromising the integrity and privacy of data in transit.Recommendations
Update to version 3.16.0.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Typebot.Io