Description
TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address :: because validateIPAddress blocks local, metadata, and private ranges but does not block :: or its expanded form. A workspace editor or creator can configure a server-side HTTP Request block or guarded script fetch to make the Typebot server connect to local HTTP services through safeKy, including flows triggered by POST /v1/typebots/{publicId}/startChat or POST /v1/sessions/{sessionId}/continueChat. This issue is fixed in version 3.17.2.
Published: 2026-07-10
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

TypeBot’s SSRF validator rejects many local and private addresses but mistakenly permits the IPv6 unspecified address `::`, allowing an attacker with access to modify a workspace’s server‑side HTTP request block or guarded script fetch to force the Typebot server to connect to internal HTTP services. When a chat is started or continued via the exposed API endpoints, the server can reach services that should be isolated, thus enabling the attacker to read or interact with internal resources.

Affected Systems

Any installation of TypeBot v3.17.1 or earlier that is actively hosting workspace editors or creators capable of configuring server‑side request blocks or guarded script fetches is vulnerable. The issue is resolved from release 3.17.2 onward.

Risk and Exploitability

The vulnerability has a CVSS score of 8.1, indicating high severity, but its EPSS score is less than 1% and the bug is not listed in the CISA KEV catalog, suggesting limited known exploitation. Nevertheless, the attack is straightforward for anyone who can alter the workspace configuration, enabling the Typebot server to connect to internal endpoints and potentially expose sensitive data.

Generated by OpenCVE AI on July 25, 2026 at 19:43 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade TypeBot to version 3.17.2 or later, which fixes the SSRF validation flaw.
  • If an upgrade traffic to known external destinations access or edit server‑side HTTP request blocks or guarded script fetches to only trusted workspace administrators and audit any configuration changes for unexpected outbound connections.
  • Optionally monitor logs for HTTP requests originating from the TypeBot server to internal addresses and investigate any that appear anomalous.

Generated by OpenCVE AI on July 25, 2026 at 19:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 13 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sat, 11 Jul 2026 00:00:00 +0000

Type Values Removed Values Added
First Time appeared Baptistearno
Baptistearno typebot.io
Vendors & Products Baptistearno
Baptistearno typebot.io

Fri, 10 Jul 2026 22:00:00 +0000

Type Values Removed Values Added
Description TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address :: because validateIPAddress blocks local, metadata, and private ranges but does not block :: or its expanded form. A workspace editor or creator can configure a server-side HTTP Request block or guarded script fetch to make the Typebot server connect to local HTTP services through safeKy, including flows triggered by POST /v1/typebots/{publicId}/startChat or POST /v1/sessions/{sessionId}/continueChat. This issue is fixed in version 3.17.2.
Title TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Baptistearno Typebot.io
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-07-13T16:16:39.911Z

Reserved: 2026-05-28T03:42:34.341Z

Link: CVE-2026-49213

cve-icon Vulnrichment

Updated: 2026-07-13T16:16:26.523Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-25T19:45:03Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)