CVE-2026-48494
Received Received - Intake

Authenticated WhatsApp Preview Session Hijack in TypeBot

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: GitHub, Inc.

Description
TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized `typebotId` and `blockId` and a foreign preview phone number tied to another preview session. The WhatsApp test-webhook handler authorizes the parent typebot first, but then resolves the preview chat session only by `wa-preview-{phone}`. As a result, an attacker can inject arbitrary webhook JSON into another workspace's WhatsApp preview session and advance its draft/unpublished flow without any access to the victim typebot. Version 3.17.0 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-11
Last Modified
2026-08-11
Generated
2026-08-11
AI Q&A
2026-08-11
EPSS Evaluated
N/A
NVD
CVE-2026-48494
EUVD
EUVD-2026-56780

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
typebot typebot to 3.17.0 (exc)
typebot typebot 3.17.0
baptistearno typebot.io 3.16.1
baptistearno typebot.io 3.17.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-48494 is an authorization bypass vulnerability in Typebot.io's WhatsApp preview webhook feature. An authenticated user with read access to any typebot can manipulate a WhatsApp preview session belonging to a different typebot by combining an authorized typebot ID and block ID with a foreign preview phone number. The flaw occurs because the system verifies the caller's access to the typebot but then uses a global session ID (wa-preview-{phone}) that lacks workspace context, allowing unauthorized session resumption and webhook JSON injection.

Impact Analysis

An attacker could inject arbitrary webhook data into your unpublished or draft WhatsApp preview sessions, causing unintended flow changes or state modifications. This could disrupt your chatbot's development process without requiring access to your specific typebot. The impact is limited to preview sessions and does not affect live runtime sessions.

Mitigation Strategies

Upgrade Typebot to version 3.17.0 or later to patch the vulnerability. Review WhatsApp preview webhook configurations to ensure proper session validation and phone number normalization.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48494. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart