CVE-2026-49213 Details
Description
TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address :: because validateIPAddress blocks local, metadata, and private ranges but does not block :: or its expanded form. A workspace editor or creator can configure a server-side HTTP Request block or guarded script fetch to make the Typebot server connect to local HTTP services through safeKy, including flows triggered by POST /v1/typebots/{publicId}/startChat or POST /v1/sessions/{sessionId}/continueChat. This issue is fixed in version 3.17.2.
A server-side request forgery (SSRF) vulnerability has been identified in TypeBot, a chatbot builder tool, in versions prior to 3.17.2. The issue arises from the SSRF validator, which can be bypassed using the IPv6 unspecified address '::'. While the validator blocks local, metadata, and private ranges, it fails to address the unspecified address, allowing workspace editors or creators to configure HTTP requests that reach local services through the TypeBot server. This vulnerability can be exploited via HTTP Request blocks or guarded script fetches, accessing internal services that should remain unexposed.
Users can update to TypeBot version 3.17.2, which addresses the vulnerability by blocking IPv6 unspecified addresses in the SSRF validator. Instructions for updating TypeBot can be found in the TypeBot documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 10, 2026CISA-ADP
Assessed Jul 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-qx46-p88f-xxm3 | CISA-ADP | AdvisoryExploitRemedyTechnical AnalysisVendor |
| https://github.com/baptisteArno/typebot.io/commit/f56c3c3f771df13a8c11e88f500dfdd78981bed1 | [email protected] | Source CodeVendor |
| https://github.com/baptisteArno/typebot.io/pull/2511 | [email protected] | Issue TrackingVendor |
| https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.2 | [email protected] | Release NotesVendor |
| https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-qx46-p88f-xxm3 | [email protected] | AdvisoryExploitRemedyTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Typebot | >= 3.17.1, < 3.17.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 13, 2026 | CVE Modified | CISA-ADP |
| Jul 10, 2026 | New CVE Received | [email protected] |