CVE-2026-47704

Received Received - Intake

Authenticated Webhook Session Hijacking in TypeBot

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: GitHub, Inc.

Description

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign live `resultId`. The webhook resume handler authorizes the parent typebot first, but then resolves the descendant `result` only by `resultId`. As a result, an attacker can inject arbitrary webhook JSON into another typebot's suspended session and advance its execution without any access to the victim typebot. Version 3.17.0 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-47704

EUVD

EUVD-2026-56220

Affected Vendors & Products

Vendor	Product	Version / Range
typebot	typebot	to 3.17.0 (exc)
baptistearno	typebot	to 3.17.0 (exc)
baptistearno	typebot	3.17.0
baptistearno	typebot	From 3.0.0 (inc) to 3.16.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

CVE-2026-47704 is an Insecure Direct Object Reference (IDOR) vulnerability in TypeBot versions before 3.17.0. An authenticated user with read access to any typebot can resume a waiting webhook session belonging to a different typebot by combining an authorized typebotId and blockId with a foreign live resultId. The webhook resume handler first checks access to the typebot but then resolves the result only by resultId without verifying ownership. This allows injecting arbitrary webhook JSON into another bot's suspended session and advancing its execution without access to the victim typebot.

Detection Guidance

To detect this vulnerability, check if your TypeBot instance is running a version prior to 3.17.0. Use commands like 'npm list typebot' or inspect the version in your deployment logs. Look for unauthorized webhook session resumes by monitoring logs for mismatched typebotId and resultId pairs.

Impact Analysis

This vulnerability allows attackers to force state changes, unauthorized branching, or unintended integration side effects in a victim's workflow. It could lead to data leaks, workflow disruption, or unauthorized actions being executed under the victim's context without their knowledge or consent.

Compliance Impact

This vulnerability could lead to unauthorized data access or processing, violating GDPR's data protection principles and HIPAA's access controls. It may result in non-compliance with requirements for data integrity, confidentiality, and proper authorization, potentially leading to legal penalties or reputational damage.

Mitigation Strategies

Immediately upgrade TypeBot to version 3.17.0 or later to patch the vulnerability. Review webhook session logs for suspicious activity involving foreign resultId usage. Ensure no unauthorized state changes or data leaks occurred in affected workflows.

Hi! I’m here to help you understand CVE-2026-47704. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70