Vulnerability · Published Aug 11, 2026 · Assigned by GitHub_M

CVE-2026-47702TypeBot API tokens stored in plaintext

Critical 9.1

In plain English

A critical-severity security flaw in typebot.io from baptisteArno. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 4.0)9.1Critical

Exploit odds (30 days)0.3%top 77.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authenticate against the builder API) are stored in the database as cleartext strings. An attacker who gains read access to the database (e.g., via SQL injection, backup exposure, or insider access) can extract all API tokens and impersonate any user without requiring a password or multi-factor authentication. Version 3.17.0 fixes the issue.

Affected products (as reported)

Vendor	Product	Versions
baptisteArno	typebot.io	= 3.16.1

Weakness: CWE-312 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-9c96-gcg3-2662 x_refsource_CONFIRM
https://github.com/baptisteArno/typebot.io/pull/2492 x_refsource_MISC
https://github.com/baptisteArno/typebot.io/commit/fdcc1784c9318904c180703e1ef4f1e06e6dd50e x_refsource_MISC
https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0 x_refsource_MISC