CVE-2026-48768

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0

Description An unauthenticated issue exists in the chatbot builder tool where the endpoint "/api/blocks/file-input/v3/generate-upload-url" uses unsanitized fileName input to construct public S3 object keys. The system issues presigned PUT URLs that do not bind the Content-Type, allowing anonymous visitors to a published bot with a file input to upload attacker-controlled HTML, SVG, or JS files to chosen subpaths. This includes the publicly served result paths of other tenants, enabling arbitrary content hosting and potential stored Cross-Site Scripting (XSS), which is a vulnerability where malicious scripts are permanently stored on the target server. While directory traversal using ../ is blocked by S3/MinIO canonicalization, forward-slash path injection remains exploitable.

Recommendations Update to version 3.17.0. As a temporary workaround, disable file input blocks immediately.