CVE-2026-62865: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in baptisteArno typebot.io

In self-hosted versions of Typebot.io before 3.18.0, the Send Email integration block improperly handles attachment paths by allowing arbitrary local filesystem paths to be read and sent as email attachments. The parseAttachments helper returns the supplied value as a filesystem path if it does not start with the application's base URL, and the Nodemailer transport is configured without disabling file or URL access. Because both the attachment path and recipient list are attacker-controlled variables, any registered user can exploit this to read any file accessible by the server process, including sensitive environment secrets, without requiring elevated privileges or interaction from other users. Open signup and default SMTP configuration facilitate exploitation. The vulnerability is addressed in version 3.18.0.

An attacker with a registered user account can read arbitrary files on the server hosting Typebot.io, including sensitive files such as /etc/passwd, process environment variables, credential encryption keys, and database connection strings. This exposure can lead to compromise of server confidentiality and potentially further system compromise. No administrative privileges or victim interaction are required for exploitation.

Upgrade Typebot.io to version 3.18.0 or later, where this vulnerability is fixed. Since no official patch links or advisories are provided, verify the upgrade from the vendor's official source. Until upgraded, restrict user registration or disable the Send Email integration block to prevent exploitation.