# CVE-2026-48768: baptisteArno TypeBot unauthenticated S3 object write in generate-upload-url

Source: https://junglewise.ai/threats/cve-2026-48768-baptistearno-typebot-unauthenticated-s3-object-write-in-generate  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-18. Updated: 2026-06-20  
License: CC BY 4.0 with a link back

CVE-2026-48768 · Severity: critical · CVSS 9.3 · Published 2026-06-18

TypeBot, a chatbot builder tool, contains a security flaw in how it handles file uploads from chatbot users. An anonymous attacker can bypass security checks to upload malicious files (such as fake login pages or malicious scripts) to the server's storage. This could allow attackers to host phishing content on the company's official domain or perform "stored cross-site scripting" (XSS) attacks, potentially compromising user sessions or damaging the organization's reputation.

Technologies: [Typebot](https://junglewise.ai/threats/technologies/typebot). Vendors: [Typebot](https://junglewise.ai/threats/vendors/typebot).

## Quick answers

**Is CVE-2026-48768 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-48768 being exploited in the wild.

**How severe is CVE-2026-48768?** Critical severity, with a CVSS score of 9.3, published 18 June 2026.

**Which products and versions are affected?** Typebot <= 3.16.1.

**Is there a fix for CVE-2026-48768?** A patch was published on 2026-05-21: Version 3.17.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-48768 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-48768?** Check whether you run Typebot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An unauthenticated arbitrary object-write vulnerability exists in the `POST /api/blocks/file-input/v3/generate-upload-url` endpoint. The application fails to sanitize the `fileName` input, allowing for forward-slash path injection within the `public/` S3 namespace. Furthermore, the generated presigned PUT URLs do not bind the `Content-Type` header, allowing attackers to upload files with arbitrary MIME types (e.g., `text/html` or `image/svg+xml`). While classic `../` path traversal is mitigated by S3/MinIO client-side canonicalization, attackers can still inject sub-paths to host malicious content or overwrite objects in other tenants' public result paths. This enables stored XSS and arbitrary content hosting on the storage origin. The issue is fixed in version 3.17.0.

## Affected products

- baptisteArno typebot.io <= 3.16.1

## Timeline

- 2026-05-21: patched: Version 3.17.0 released
- 2026-05-24: advisory: GitHub Security Advisory published
- 2026-06-18: disclosed: NVD disclosure date

## References

- [https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0](https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0)
- [https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-fp7x-6pqh-vhvf](https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-fp7x-6pqh-vhvf)

## Related threats

- [Typebot arbitrary local file read via Send Email attachment](https://junglewise.ai/threats/cve-2026-62865-typebot-arbitrary-local-file-read-via-send-email-attachment)
- [TypeBot custom domain deletion authorization bypass](https://junglewise.ai/threats/cve-2026-62861-typebot-custom-domain-deletion-authorization-bypass)
- [TypeBot privilege escalation in Google Sheets integration](https://junglewise.ai/threats/cve-2026-48767-typebot-privilege-escalation-in-google-sheets-integration)
- [TypeBot WhatsApp preview webhook authorization bypass](https://junglewise.ai/threats/cve-2026-48494-typebot-whatsapp-preview-webhook-authorization-bypass)
- [TypeBot CSV injection in result export](https://junglewise.ai/threats/cve-2026-47705-typebot-csv-injection-in-result-export)