CVE-2026-48763

TypeBot prior to v3.17.0 exposes a deprecated public upload endpoint GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url that returns a presigned S3 PUT URL for an attacker-controlled filePath. An unauthenticated attacker who knows a valid public typebotId and blockId can obtain ...