TypeBot versions prior to 3.16.0 have a flaw in the bot engine's findResult query that does not restrict results by typebotId. This allows an authenticated user to retrieve data belonging to other typebots by providing a foreign resultId to the startChat endpoint. The vulnerability is constrained by the use of CUID2 random 24-character IDs, the requirement that rememberUser is enabled, and the need for matching variable names in the current typebot. If exploited, an attacker can access previous answers, session variable values, and flags, potentially exposing PII such as names, emails, and phone numbers. The issue is addressed in version 3.16.0.

An attacker with authenticated access can bypass authorization controls to access data from other typebots, including user answers and session variables. This may lead to exposure of personally identifiable information like names, emails, and phone numbers. The impact is limited by the difficulty of guessing valid resultIds and configuration requirements. The CVSS score is 3.1, indicating a low severity impact.

Upgrade typebot.io to version 3.16.0 or later, where this vulnerability has been fixed. No additional mitigation is required if the system is running the fixed version. For affected versions, restrict authenticated user access and consider disabling rememberUser if feasible until patched.