CVE-2026-39968

{
  "id": "CVE-2026-39968",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-39968",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-26T13:08:55.483789Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "baptisteArno",
          "product": "typebot.io",
          "versions": [
            {
              "status": "affected",
              "version": "< 3.16.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-05-22T19:17:03.373",
  "references": [
    {
      "url": "https://github.com/baptisteArno/typebot.io/commit/d96f572e6099c5f622c05ba7b8634e6477dcf052",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-cq66-9cwr-x8jr",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-cq66-9cwr-x8jr",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        },
        {
          "lang": "en",
          "value": "CWE-522"
        },
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 (\"Credential Theft via Client-Side Script Execution and API Authorization Bypass\") is incomplete. While the builder's getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime still allows any authenticated user to use credentials from any workspace via the preview chat endpoint. The bot-engine's getCredentials() utility function uses a falsy check (if (workspaceId && ...)) for workspace ownership validation. Since the preview endpoint accepts a client-controlled workspaceId field and the Zod schema allows empty strings, an attacker can supply workspaceId: \"\" to bypass credential ownership verification entirely. Exploitation can result in credential exfiltration, external service abuse, financial damage and a data breach."
    },
    {
      "lang": "es",
      "value": "TypeBot es una herramienta de creación de chatbots. En las versiones 3.15.2 y anteriores, la solución para GHSA-4xc5-wfwc-jw47 ('Robo de credenciales mediante ejecución de scripts del lado del cliente y omisión de autorización de API') está incompleta. Aunque el endpoint tRPC getCredentials del constructor fue parcheado con verificaciones de membresía de espacio de trabajo, el tiempo de ejecución del motor de bots aún permite a cualquier usuario autenticado usar credenciales de cualquier espacio de trabajo a través del endpoint de chat de vista previa. La función de utilidad getCredentials() del motor de bots utiliza una verificación falsy (si (workspaceId && ...)) para la validación de la propiedad del espacio de trabajo. Dado que el endpoint de vista previa acepta un campo workspaceId controlado por el cliente y el esquema Zod permite cadenas vacías, un atacante puede proporcionar workspaceId: '' para omitir completamente la verificación de propiedad de credenciales. La explotación puede resultar en exfiltración de credenciales, abuso de servicios externos, daños financieros y una violación de datos."
    }
  ],
  "lastModified": "2026-07-23T16:10:00.137",
  "sourceIdentifier": "security-advisories@github.com"
}