CVE-2026-39966— TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions

TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions

TypeBot is a chatbot builder tool. In versions 3.15.2, the getLinkedTypebots API endpoint returns full bot definitions to any authenticated user who references a target bot ID in a Typebot Link block, regardless of workspace ownership, leading to IDOR. The authorization check uses Array.filter() with an async callback — since filter() is synchronous, the callback always returns a truthy Promise, so the access control predicate is never actually evaluated. Any authenticated Typebot user can read the full definition of any other workspace's private bots, including: all conversation blocks and logic flow, variable values embedded in the bot (credentials, API keys, PII), webhook URLs and integration configurations. This issue has been fixed in version 3.16.0.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

授权机制不正确

Typebot 安全漏洞

Typebot是Baptiste Arnaud个人开发者的一个开源聊天机器人构建器。 Typebot 3.15.2版本存在安全漏洞，该漏洞源于getLinkedTypebots API端点使用带有异步回调的Array.filter()，导致授权检查始终返回真值Promise，可能导致不安全的直接对象引用。以下版本受到影响：3.15.2版本。

N/A

N/A