---
id: CVE-2026-48495
title: TypeBot is a chatbot builder tool
summary: >-
  TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets
  OAuth callback decodes a base64-encoded JSON `state` parameter and trusts the
  embedded `workspaceId`, `typebotId`, `blockId`, and `redirectUrl` without
  cryptog…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N'
cwe:
  - CWE-862
published: '2026-08-11'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T20:46:02.457'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-48495'
references:
  - url: >-
      https://github.com/baptisteArno/typebot.io/commit/c0ffd825e2f4ee2256a157fd085fb624dcede625
    label: security-advisories@github.com
  - url: 'https://github.com/baptisteArno/typebot.io/pull/2501'
    label: security-advisories@github.com
  - url: 'https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0'
    label: security-advisories@github.com
  - url: >-
      https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-w789-9gxq-2xcj
    label: security-advisories@github.com
  - url: >-
      https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-w789-9gxq-2xcj
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00315
epssPercentile: 0.24685
ingestedAt: '2026-09-09T21:22:45.527Z'
---

## Overview

TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OAuth callback decodes a base64-encoded JSON `state` parameter and trusts the embedded `workspaceId`, `typebotId`, `blockId`, and `redirectUrl` without cryptographic integrity protection or authorization checks. The callback route is authenticated, but it does not verify that the authenticated user has write access to the target workspace or Typebot before creating credentials in the workspace or updating Typebot groups. An authenticated user who can obtain a valid Google OAuth `code` can alter the `state` value to create Google Sheets credentials in another workspace and, if target IDs are known, attach those credentials to a block in another Typebot. Version 3.17.0 patches the issue.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.