1 matches found
CVE-2026-62861 TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain
TypeBot is a chatbot builder tool. Prior to 3.18.0, any authenticated non-guest workspace member can remove another workspace's public custom domain and make typebots on that domain unavailable. The custom-domain delete handler in handleDeleteCustomDomain.ts authorizes a caller against a...
6.4CVSS5.6AI score
SaveExploits0References5
20