CVE-2026-48763
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
TypeBot, a chatbot builder tool, prior to version 3.17.0 exposes a deprecated public upload endpoint that accepts an attacker-controlled filePath and returns a presigned S3 PUT URL. An unauthenticated attacker who knows a valid public typebotId and blockId can request presigned upload URLs for arbitrary objects in the shared bucket, including private/ and other tenants' public/ paths.
Risk Assessment
An unauthenticated attacker can gain access to private data or data of other tenants, potentially leading to confidentiality and integrity breaches.
Recommendation
Update TypeBot to version 3.17.0 or later, which fixes this vulnerability. Additionally, restrict access to the endpoint and verify permissions before generating URLs.
Original NVD description (English source)
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url` that accepts an attacker-controlled `filePath` and returns a presigned S3 `PUT` URL for that exact key. Because the endpoint only checks that the referenced typebot is public and that the referenced block is a file input block, an unauthenticated attacker who knows a valid public `typebotId` and `blockId` can request presigned upload URLs for arbitrary objects in the shared bucket, including `private/...` and other tenants' `public/...` paths. Version 3.17.0 fixes this issue.