PT-2026-28105 · Baptistearno · Typebot.Io

Published 2026-03-25 · Updated 2026-05-25 · CVE-2026-33712

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.16.0

Description Unauthenticated users can achieve Server-Side Request Forgery (SSRF) by providing a custom typebot definition containing server-side code blocks. The issue exists because the fetch function within the isolated-vm sandbox calls the Node.js native fetch without using the validateHttpReqUrl validation that typically protects the HTTP Request block. This allows the bypass of existing SSRF mitigations. Exploitation can lead to internal network access, data exfiltration, and the theft of cloud credentials for both hosted services and self-hosted deployments. The affected endpoint is 'POST /api/v1/typebots/{typebotId}/preview/startChat'.

Recommendations Update to version 3.16.0.

Exploit

Fix

Missing Authorization

SSRF

Weakness Enumeration

CWE-862

CWE-918

Related Identifiers

CVE-2026-33712

Affected Products

Typebot.Io

References · 5

• 🔥 https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-vc2q-r6rq-ggj9 · Exploit
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 · Note
• https://twitter.com/VulmonFeeds/status/2058960714719486059 · Twitter Post
• https://t.me/CVEtracker/54652 · Telegram Post
• https://twitter.com/q1uf3ng/status/2036824777642655889 · Twitter Post