CVE-2026-48766 TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to exfiltrate stored OpenAI-compatible API keys by invoking the OpenAI model-listing helper with an attacker-controlled baseUrl. The vulnerable path decrypts the selected workspace...

CVE-2026-48766

TypeBot (chatbot builder) before version 3.17.0 exposes OpenAI API keys stored in workspaces. A low-privilege guest can exfiltrate credentials by invoking the OpenAI model-listing helper with an attacker-controlled baseUrl. The vulnerability decrypts the workspace credential, constructs an OpenAI...