Executive brief
A vulnerability in the Botpress Twilio integration allows unauthorized individuals to steal sensitive account credentials. By sending a specially crafted message to the system, an attacker can trick Botpress into sending the Twilio account SID and authentication token to a server they control. This could lead to a full takeover of the organization's Twilio account, allowing the attacker to send messages, access logs, or incur costs.
Technical details
The Twilio integration webhook handler in Botpress fails to validate the 'X-Twilio-Signature' header, allowing it to accept unauthenticated POST requests. When the handler processes a forged media message, it extracts URLs from the 'MediaUrlN' parameters and attempts to fetch them. Crucially, these outgoing HTTP requests include the integration's Twilio 'accountSID' and 'authToken' in the 'Authorization' header as base64-encoded Basic Auth. An unauthenticated remote attacker can exploit this to capture plaintext Twilio credentials by providing a URL pointing to an attacker-controlled listener. As of the advisory date, no patch has been confirmed by the vendor.
Affected products
- Botpress Botpress
Timeline
- 2026-01-28: other: Tenable sends initial request for contact to vendor
- 2026-03-27: disclosed: Initial release of advisory by Tenable
- 2026-03-27: advisory: NVD publishes CVE-2026-4984