A low‑privilege guest member can retrieve a live Google Sheets OAuth access token for the workspace by calling the getAccessToken helper. The helper mistakenly only verifies that the caller has read access, then decrypts the stored credential, refreshes or retrieves the token, and returns the raw bearer token directly. CWE‑200 sensitive data exposure allows the attacker to obtain a bearer token that can be used to access Google Sheets data, compromising confidentiality and potentially allowing data exfiltration.

The vulnerability affects Typebot.io, a chatbot builder tool, for all releases before version 3.17.0. Users with guest membership on a workspace can exploit the flaw until they upgrade to v3.17.0 or later.

The CVSS score is 7.6, indicating a high impact vulnerability. EPSS is less than 1%, implying that the likelihood of exploitation is currently low, and the issue is not listed in the CISA KEV catalog. The exploit path requires the attacker to be a guest with read permission on the workspace, then to call the API endpoint; thus it is a network‑based attack that can be performed remotely if the API endpoint is exposed. If successful, the attacker obtains a token that grants direct access to the workspace’s Google Sheets data outside of Typebot.