cve.bz

CVE-2025-65098

7.4 highEPSS 0.3%

High (7.4) in typebot typebot. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in @typebot.io/js 0.9.15.

Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates their OpenAI keys, Google Sheets tokens, and SMTP passwords. The `/api/trpc/credentials.getCredentials` endpoint returns plaintext API keys without verifying credential ownership. Version 3.13.2 fixes the issue.

Severity

CVSS 3.1

7.4 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWEs
CWE-79, CWE-522, CWE-200, CWE-284, CWE-311, CWE-639, CWE-862
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-4xc5-wfwc-jw47npm@typebot.io/js<0.9.150.9.15

References

Check your stackJSON