TypeBot versions 3.15.2 and earlier have an incomplete fix for a prior credential theft vulnerability. Although the getCredentials tRPC endpoint was patched with workspace membership checks, the bot-engine runtime's preview chat endpoint still permits any authenticated user to retrieve credentials from any workspace. This is due to the getCredentials() utility function performing a falsy check on workspaceId, which can be bypassed by providing an empty string as workspaceId, accepted by the Zod schema. This flaw allows attackers to bypass credential ownership verification, leading to unauthorized credential access.

Successful exploitation allows an authenticated user to bypass workspace membership checks and access credentials belonging to other workspaces. This can result in credential exfiltration, unauthorized use of external services, potential financial damage, and data breaches. The CVSS v3.1 base score is 7.1 (High), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch link is provided at this time. Until a patch is available, restrict access to authenticated users carefully and monitor for suspicious activity related to workspace credential access. Avoid using vulnerable versions prior to 3.16.0 once a patch is released.