CVE-2026-48762
TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue.
| CWE | CWE-918 |
| Vendor | baptistearno |
| Product | typebot.io |
| Published | Aug 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for baptistearno typebot.io
Be the first to know when new medium vulnerabilities affecting baptistearno typebot.io are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
baptisteArno / typebot.io
< 3.16.0
References
github.com: https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763 github.com: https://github.com/baptisteArno/typebot.io/pull/2428 github.com: https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192 github.com: https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0