TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at "GET /api/v1/typebots/{typebotId}/blocks/{blockId}/storage/upload-url" that accepts an attacker-controlled "filePath" and returns a presigned S3 "PUT" URL for that exact key. Because the endpoint only checks that the referenced typebot is public and that the referenced block is a file input block, an unauthenticated attacker who knows a valid public "typebotId" and "blockId" can request presigned upload URLs for arbitrary objects in the shared bucket, including "private/..." and other tenants' "public/..." paths. Version 3.17.0 fixes this issue.