CVE-2026-62861: TypeBot: Cross-tenant custom-domain removal via unbound `name` in handleDeleteCustomDomain
TypeBot is a chatbot builder tool. Prior to 3.18.0, any authenticated non-guest workspace member can remove another workspace's public custom domain and make typebots on that domain unavailable. The custom-domain delete handler in handleDeleteCustomDomain.ts authorizes a caller against a client-supplied workspaceId but sends the client-supplied domain name to the shared Vercel project before verifying that the domain belongs to that workspace. This issue is fixed in version 3.18.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.18.0
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated, non-guest member of a TypeBot workspace can exploit it. The attacker does not need membership in the workspace that owns the targeted custom domain.
What impact can an attacker cause?
An attacker can remove another workspace's public custom domain from the shared Vercel project. Typebots hosted on the removed domain can become unavailable.
Are guest accounts affected?
The issue is described as requiring an authenticated non-guest workspace member. Guest members are not identified as able to exploit it.
What versions are affected and what fixes it?
TypeBot versions prior to 3.18.0 are affected. Upgrading to version 3.18.0 fixes the issue.