CVE-2026-48766

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0

Description A low-privilege guest member of a workspace can exfiltrate stored OpenAI-compatible API keys. This occurs when the OpenAI model-listing helper is invoked using an attacker-controlled baseUrl. The system decrypts the workspace credential and creates an OpenAI client that includes the secret in the apiKey and the api-key header, sending the request to the specified URL. This is possible because the permission check allows any readable workspace member and the listCredentials function reveals credential identifiers to guests.

Recommendations Update to version 3.17.0.