CVE-2026-62865

Deferred Deferred - Pending Action

Local File Read via Send Email Block in Typebot

Publication date: 2026-08-25

Last updated on: 2026-09-09

Assigner: GitHub, Inc.

Description

Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the supplied value as a filesystem path whenever it does not start with the application's own base URL, instead of requiring an http or https URL. The Nodemailer transport is created without disableFileAccess or disableUrlAccess, both of which default to false, so an attachment specified as an absolute server path is read from the local filesystem and delivered. Because both the attachment value and the recipient list are attacker-controllable typebot variables, any registered user can publish a bot whose Send Email block attaches an absolute path such as /etc/passwd or /proc/self/environ and mails it to an address they control. This enables reading any file the server process can access, including process environment secrets such as the credential encryption key and database connection string, without administrative privileges or victim interaction. Open signup is enabled by default and the system SMTP credential is already configured, so no non-default configuration is required. This issue is fixed in version 3.18.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-09-09

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-62865

Affected Vendors & Products

Vendor	Product	Version / Range
typebot	typebot	to 3.18.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

Typebot is an open-source chatbot builder. In versions before 3.18.0, the Send Email integration block allows arbitrary local file reading on the server. Attackers can exploit this by specifying absolute file paths in email attachments, which are then read and sent to an attacker-controlled email address. This happens because the system does not restrict file paths and Nodemailer is configured to allow file access.

Detection Guidance

Check Typebot server versions prior to 3.18.0. Inspect Send Email integration blocks for attachments using absolute server paths. Monitor outbound emails for unexpected file attachments from user-controlled variables.

Impact Analysis

This vulnerability allows any registered user to read sensitive files on the server, including system files like /etc/passwd or /proc/self/environ. Attackers can access environment secrets such as database credentials or encryption keys, potentially leading to full system compromise. No special configuration or elevated privileges are required for exploitation.

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA due to unauthorized access to sensitive data. GDPR mandates protection of personal data, while HIPAA requires safeguarding protected health information. The exposure of credentials or database contents could result in regulatory penalties and loss of trust.

Mitigation Strategies

Upgrade Typebot to version 3.18.0 or later. Disable open signup if not required. Review and restrict user permissions to prevent unauthorized bot modifications. Validate attachment paths in Send Email blocks to ensure they use http or https URLs only.

Hi! I’m here to help you understand CVE-2026-62865. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70