Vulnerability · Published Aug 11, 2026 · Assigned by GitHub_M

CVE-2026-47704TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting session

High 7.1

In plain English

A high-severity authorization bypass via user-controlled key in typebot.io from baptisteArno. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 4.0)7.1High

Exploit odds (30 days)0.6%top 53.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue.

Affected products (as reported)

Vendor	Product	Versions
baptisteArno	typebot.io	< 3.17.0

Weakness: CWE-639 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h67g-6q6g-58cj x_refsource_CONFIRM
https://github.com/baptisteArno/typebot.io/pull/2494 x_refsource_MISC
https://github.com/baptisteArno/typebot.io/commit/6f915c3096bd43d4a913f0f2c7a92e8463f81a86 x_refsource_MISC
https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0 x_refsource_MISC