Executive brief
TypeBot is a chatbot builder platform that integrates with Google Sheets for data storage and automation. A vulnerability in versions before 3.17.0 allows guest-level workspace members to steal live Google Sheets OAuth access tokens, enabling unauthorized access to sensitive spreadsheets and data outside the TypeBot platform. This could lead to unauthorized data exfiltration or manipulation of business-critical spreadsheets.
Technical details
The vulnerability is a privilege escalation flaw in the Google Sheets OAuth integration. A low-privilege guest member can call the `getAccessToken` helper function, which checks only for read access to the workspace before decrypting stored Google OAuth credentials and returning the raw bearer token. Because guests can enumerate credential identifiers, they can mint and reuse the workspace's Google OAuth access token outside TypeBot. The fix (version 3.17.0) enforces workspace and typebot write authorization, secures OAuth state with signed payloads and user binding, and implements proper authorization checks before credential operations.
Affected products
- TypeBot TypeBot prior to 3.17.0
Timeline
- 2026-08-11: disclosed
- 2026-05-21: patched: Fix merged in commit c0ffd82