TypeBot versions 3.15.2 and earlier have an incomplete fix for a prior credential theft vulnerability. Although the builder's getCredentials tRPC endpoint enforces workspace membership checks, the bot-engine runtime's preview chat endpoint does not properly validate workspace ownership. The getCredentials() function uses a falsy check on workspaceId, and since the preview endpoint accepts a client-controlled workspaceId that can be an empty string (allowed by the Zod schema), an attacker can bypass ownership verification by submitting workspaceId as an empty string. This allows any authenticated user to access credentials from any workspace, risking credential exfiltration and misuse.

The vulnerability allows authenticated users to bypass access controls and retrieve credentials from any workspace, potentially leading to credential exfiltration, unauthorized use of external services, financial loss, and data breaches. The CVSS score of 7.1 reflects a high severity with network attack vector, low attack complexity, requiring privileges but no user interaction, and high confidentiality impact with limited integrity impact and no availability impact.

Patch status is not yet confirmed — no official fix or patch links are currently available. Users should monitor the vendor's advisory for updates and apply the official fix once released. Until then, restrict authenticated user permissions as much as possible and avoid using vulnerable versions. No vendor advisory states that no action is required or that the issue is mitigated.