TypeBot stores bearer credentials in the database as cleartext strings in version 3.16.1. An attacker who can read the database, such as through SQL injection, a leaked backup, or insider privilege, can extract every API token. These tokens grant full API access without requiring a password or multi‑factor authentication, enabling the attacker to impersonate any user, modify data, or perform any action the user is authorized to do. This vulnerability is a classic credentials‑compromise flaw (CWE‑312).

The flaw exists in TypeBot version 3.16.1 from the vendor baptisteArno:typebot.io. Versions 3.17.0 and later contain the fix, while earlier releases are not affected.

The CVSS score of 9.1 classifies the issue as critical. EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog, but the lack of protection for stored credentials remains a high‑risk scenario. The likely attack vector requires only database read access, which can be achieved via SQL injection, exposed backups, or privileged insiders. Once tokens are exfiltrated, the attacker immediately gains full API access, effectively bypassing all authentication mechanisms.