CVE-2026-47704

CVE-2026-47704 affects TypeBot prior to 3.17.0. An authenticated user with read access to any typebot can resume a waiting webhook session of a different typebot by combining an authorized typebotId, blockId, and a foreign live resultId. The webhook resume handler authorizes the parent typebot bu...