Data Exposure in TypeBot Chatbot Builder by Baptiste Arno

CVE-2026-39967

What is CVE-2026-39967?

The TypeBot chatbot builder tool, up to version 3.15.2, is susceptible to a data exposure vulnerability, allowing authenticated users to access responses and variable values from different chat sessions. This occurs when an attacker can supply a foreign resultId to the startChat endpoint, bypassing expected security measures. The risk is heightened when certain features, like rememberUser, are enabled, potentially revealing personally identifiable information (PII) such as names, emails, and phone numbers. This issue has been addressed in the latest release, version 3.16.0.

References