CVE-2026-48765 describes an authorization bypass vulnerability in TypeBot (baptisteArno) prior to version 3.17.0. A low-privilege read collaborator can extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential by supplying a writable workspaceId controlled by the attacker. The update function validates only the attacker-supplied workspaceId but updates the credential record globally by id, allowing the attacker to reassign OAuth credentials across workspaces. This leads to cross-workspace OAuth credential takeover and reassignment. The vulnerability is fixed in version 3.17.0.

Successful exploitation allows an attacker with low-privilege read access to escalate privileges by taking over OAuth credentials from other workspaces. This can result in complete compromise of OAuth credentials, leading to high confidentiality and integrity impact, and some availability impact. The CVSS 3.1 base score is 9.9 (critical), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and low impact on availability.

Upgrade TypeBot to version 3.17.0 or later, where this authorization bypass vulnerability is patched. No other mitigation or workaround is documented. Patch status is not explicitly stated but the vendor has fixed the issue in 3.17.0.