What happened
NVD published CVE-2026-48765 (CVSS 9.9, Critical) describing a broken authorization check that lets a low-privilege collaborator escalate to full control of workspace OAuth credentials.
Why it matters
TypeBot is a widely-used open-source chatbot/conversational-AI builder; compromised OAuth credentials expose all downstream services (Google Sheets, OpenAI-compatible providers, etc.) connected to the workspace, enabling data theft or malicious bot reconfiguration.
Attack vector
A low-privilege read collaborator extracts a workspace OAuth credentialsId from a readable bot configuration, then overwrites that credential via handleUpdateOAuthCredentials() by supplying an attacker-controlled writable replacement, hijacking the workspace's connected OAuth integration.
Affected systems
TypeBot < 3.17.0
Mitigation
Upgrade to TypeBot >= 3.17.0.