The flaw allows a workspace user who can set WhatsApp webhook URLs to specify any HTTP address. When a status event arrives, Typebot posts it to that address using an unguarded HTTP client, enabling the server to reach internal hosts or metadata endpoints. The vulnerability is a typical SSRF as defined by CWE‑918, which can be exploited to read internal network resources or bypass network isolation.

The issue exists in Typebot.io version 3.16.x and earlier, until the 3.17.0 release. Any workspace that has configured the WhatsApp status forwarding feature is vulnerable. The affected product is the Typebot chatbot builder owned by baptisteArno.

The CVSS v3 score of 5.4 indicates moderate severity. The EPSS score is below 1%, showing a low probability of widespread exploitation. The vulnerability is not listed in CISA KEV. An attacker who gains the ability to alter the WhatsApp settings in a workspace can exploit the flaw by directing the Typebot server to internal addresses. Successful exploitation would allow reading, modifying, or triggering actions against internal network services, but requires legitimate workspace access and does not directly expose the attacker's credentials.