CVE-2026-48765

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0

Description Low-privilege read collaborators can extract a workspace OAuth credentialsId from a readable bot configuration. By supplying an attacker-controlled writable workspaceId to the handleUpdateOAuthCredentials() function, an attacker can overwrite that credential. The update process validates only the provided workspace and updates the credential record using the global id, which also rewrites the credential's workspaceId. This flaw enables the takeover and reassignment of OAuth credentials across different workspaces.

Recommendations Update to version 3.17.0.