PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-28445 baptisteArno CVE debrief

CVE-2026-28445 is a high-severity vulnerability in Typebot, a chatbot builder tool. Versions 3.15.2 and prior are affected. The RatingButton component in the embed package renders user-controlled customIcon.svg field directly via Solid's innerHTML directive without sanitization. This allows for arbitrary HTML/JS execution in the builder's authenticated context, enabling session hijacking and privilege escalation within the builder application. The issue has been fixed in version 3.16.0.

Vendor
baptisteArno
Product
typebot.io
CVSS
HIGH 8.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-22
Original CVE updated
2026-07-23
Advisory published
2026-05-22
Advisory updated
2026-07-23

Who should care

Developers and administrators using Typebot versions 3.15.2 or earlier should be concerned about this vulnerability. Successful exploitation could lead to unauthorized actions within the builder application.

Technical summary

The RatingButton component in Typebot's embed package uses Solid's innerHTML directive to render the user-controlled customIcon.svg field without proper sanitization. Although DOMPurify is used elsewhere in the codebase, it is not applied here. The builder preview renders bots inline on the builder's origin (builder.typebot.io) under a CSP permitting 'unsafe-inline'. This allows a malicious typebot to execute arbitrary HTML/JS in the builder's authenticated context, bypassing the Web Worker sandbox that protects Script blocks during preview.

Defensive priority

High priority should be given to updating Typebot to version 3.16.0 or later. In the meantime, review and restrict the use of custom icons in RatingButton components, and consider implementing additional security measures such as Content Security Policy (CSP) restrictions.

Recommended defensive actions

  • Update Typebot to version 3.16.0 or later
  • Review and restrict the use of custom icons in RatingButton components
  • Implement additional security measures such as Content Security Policy (CSP) restrictions
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
  • Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record was published on 2026-05-22T17:16:46.127Z and was last modified on 2026-07-23T16:10:00.137Z. The NVD entry is currently Deferred. The vulnerability has been fixed in version 3.16.0. Evidence is limited, and defenders should verify the affected scope and severity with the vendor. No additional information is available about the exploitability or potential impact beyond the provided CVE and NVD details.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-05-22T17:16:46.127Z and has not been modified since then. The NVD entry is currently Deferred.