Executive brief
TypeBot, a chatbot builder tool, contained a security flaw in its profile picture upload system. An attacker could upload a malicious image file that, when viewed by others, executes hidden code in their web browser. This could allow an attacker to steal login sessions, take over user accounts, or access sensitive customer data.
Technical details
A stored Cross-Site Scripting (XSS) vulnerability exists in TypeBot versions 3.15.2 and prior due to improper sanitization of SVG file uploads in the profile picture form. The application fails to restrict or neutralize XML-based uploads, allowing attackers to embed malicious JavaScript within an SVG file. When the file is rendered by the browser from the app.typebot.io domain, the script executes in the context of the victim's session. This can be used to exfiltrate session tokens or perform actions on behalf of the user. The issue is fixed in version 3.16.0 by improving file handling and sanitization.
Affected products
- baptisteArno typebot.io <= 3.15.2
Timeline
- 2026-04-08: patched: Version 3.16.0 released
- 2026-05-22: disclosed
- 2026-05-22: advisory