Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates their OpenAI keys, Google Sheets tokens, and SMTP passwords. The `/api/trpc/credentials.getCredentials` endpoint returns plaintext API keys without verifying credential ownership. Version 3.13.2 fixes the issue.
References
| Link | Resource |
|---|---|
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-4xc5-wfwc-jw47 | Exploit Vendor Advisory |
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-4xc5-wfwc-jw47 | Exploit Vendor Advisory |
Configurations
History
30 Jan 2026, 14:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Typebot
Typebot typebot |
|
| CPE | cpe:2.3:a:typebot:typebot:*:*:*:*:*:-:*:* | |
| References | () https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-4xc5-wfwc-jw47 - Exploit, Vendor Advisory |
22 Jan 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-4xc5-wfwc-jw47 - |
22 Jan 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-22 15:16
Updated : 2026-01-30 14:32
NVD link : CVE-2025-65098
Mitre link : CVE-2025-65098
CVE.ORG link : CVE-2025-65098
JSON object : View
Products Affected
typebot
- typebot
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-200Exposure of Sensitive Information to an Unauthorized Actor
CWE-284Improper Access Control
CWE-311Missing Encryption of Sensitive Data
CWE-522Insufficiently Protected Credentials
CWE-639Authorization Bypass Through User-Controlled Key
CWE-862Missing Authorization