CVE-2026-33712 Details
Description
Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the preview chat endpoint (POST /api/v1/typebots/{typebotId}/preview/startChat) allows unauthenticated users to achieve Server-Side Request Forgery (SSRF) by supplying a custom typebot definition with server-side code blocks. The fetch function exposed inside the isolated-vm sandbox calls Node.js native fetch without the SSRF validation (validateHttpReqUrl) that protects the HTTP Request block. This bypasses all SSRF mitigations added after GHSA-8gq9-rw7v-3jpr. Exploitation of this unauthenticated SSRF vulnerability can lead to cloud credential theft, internal network access and data exfiltration for any self-hosted Typebot deployments and hosted services. This issue has been fixed in version 3.16.0.
A server-side request forgery (SSRF) vulnerability has been identified in Typebot versions through 3.15.2. The issue arises in the preview chat endpoint, where unauthenticated users can send requests that bypass security validations. By including a custom typebot definition with server-side code blocks, attackers can exploit the fetch function within an isolated-vm sandbox. This exploitation can lead to unauthorized access to internal network resources, theft of cloud credentials, and data exfiltration for self-hosted Typebot deployments and those on the Typebot hosted service.
Users should update to Typebot version 3.16.0, which addresses the vulnerability by requiring authentication for the preview chat endpoint and restoring the necessary SSRF validations.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 22, 2026CISA-ADP
Assessed May 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-vc2q-r6rq-ggj9 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 | [email protected] | Release NotesVendor |
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-vc2q-r6rq-ggj9 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Typebot | <= 3.15.2 (semver) |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 22, 2026 | CVE Modified | CISA-ADP |
| May 22, 2026 | New CVE Received | [email protected] |