CVE-2026-39968 TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint
An attacker can bypass workspace ownership checks to steal credentials from other workspaces via the bot-engine preview endpoint.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-39968?
CVE-2026-39968 is a high-severity missing authorization vulnerability in baptisteArno typebot.io, published on 22 May 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Client-Side Script Execution and API Authorization Bypass") is incomplete. While the builder's getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The bot-engine's getCredentials() utility function uses a falsy check (if (workspaceId && ...)) for workspace ownership validation. Since the preview endpoint accepts a client-controlled workspaceId field and the Zod schema allows empty strings, an attacker can supply workspaceId: "" to bypass credential ownership verification entirely. Exploitation can result in credential exfiltration, external service abuse, financial damage and a data breach.
Which versions are affected by CVE-2026-39968?
How do I fix CVE-2026-39968?
No fix has been published for CVE-2026-39968 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-39968 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-39968 exists.
Sources
Also known as GHSA-cq66-9cwr-x8jr.