Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/25 9:46 p.m.6 views

CVE-2026-62861 TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain

TypeBot is a chatbot builder tool. Prior to 3.18.0, any authenticated non-guest workspace member can remove another workspace's public custom domain and make typebots on that domain unavailable. The custom-domain delete handler in handleDeleteCustomDomain.ts authorizes a caller against a...

6.4CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder