TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion)

An authenticated attacker who is a non-guest member of their own workspace (Workspace-A) can obtain a themeTemplateId from a victim's workspace (Workspace-B) — for example, via shared typebots or network traffic. The attacker then calls the save or delete endpoint with their own workspaceId (which passes the membership check) and the victim's themeTemplateId. Because the Prisma queries in handleSaveThemeTemplate and handleDeleteThemeTemplate only filter by id and omit workspaceId, the operation succeeds on the victim's template. This allows any authenticated user to modify or delete theme templates belonging to any other workspace [ref_id=1].

The advisory recommends adding workspaceId to the Prisma WHERE clauses so that the template operation is scoped to the workspace the attacker is authorized for. For deletion, the fix uses deleteMany with a compound WHERE clause (id, workspaceId). For save/update, the fix first checks that the template belongs to the workspace via findFirst before performing the upsert. This ensures that even if an attacker passes a valid workspaceId and a victim's templateId, the query will not match the victim's template because the workspaceId does not match [ref_id=1].