An Insecure Direct Object Reference (IDOR) in TypeBot allows any authenticated non‑guest user to modify or delete theme templates that belong to other workspaces. The vulnerability occurs because the save and delete handlers validate the user's membership in the target workspace but do not include the workspace identifier in the database query. This means an attacker can change or remove design data they should not have access to, and the template identifiers can be exposed through shared bot links or network traffic.

The issue affects the TypeBot chatbot builder tool provided by baptisteArno. Versions 3.15.2 and earlier are vulnerable; the fix is available in release v3.16.0. The specific endpoints are handleSaveThemeTemplate and handleDeleteThemeTemplate, which manipulate themeTemplateId without scoping the operation to the authenticated user's workspace.

The vulnerability is rated as a high‑severity CVSS score of 7.1. Its EPSS score is below 1%, indicating a low current exploitation probability, and it is not listed in the CISA KEV catalog. Exploitation requires only legitimate authentication and does not need special network access, making it accessible to any user with a usable account in the system. While the chance of immediate exploitation is low, the potential impact on confidentiality and integrity of design assets across workspaces warrants prompt remediation.