CVE-2026-48763 TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath
Unauthenticated attackers can write arbitrary files to the shared S3 bucket via a deprecated public upload endpoint in TypeBot.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-48763?
CVE-2026-48763 is a high-severity missing authorization vulnerability in baptisteArno typebot.io, published on 11 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url` that accepts an attacker-controlled `filePath` and returns a presigned S3 `PUT` URL for that exact key. Because the endpoint only checks that the referenced typebot is public and that the referenced block is a file input block, an unauthenticated attacker who knows a valid public `typebotId` and `blockId` can request presigned upload URLs for arbitrary objects in the shared bucket, including `private/...` and other tenants' `public/...` paths. Version 3.17.0 fixes this issue.
Weakness: CWE-862
Which versions are affected by CVE-2026-48763?
How do I fix CVE-2026-48763?
No fix has been published for CVE-2026-48763 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-48763 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-48763 exists.
Sources
Also known as GHSA-m7f5-3wcm-x2c4.