PT-2026-42802 · Typebot · Typebot

Published 2026-05-22 · Updated 2026-05-22 · CVE-2026-34207

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.16.0

Description TypeBot is a chatbot builder tool. The SSRF protection for Webhook / HTTP Request blocks validates only the URL string, blocked hostname literals, and literal IP formats without resolving DNS before allowing the request. This allows a hostname that resolves to 127.0.0.1, 169.254.169.254, or RFC1918/private space to pass validation and be fetched by the backend HTTP client. This enables server-side request forgery (SSRF)—a flaw where an attacker can force the server to make requests to internal or unintended destinations—to loopback, cloud metadata, and private network targets.

Recommendations Update to version 3.16.0.

Exploit

Fix

RCE

SSRF

Weakness Enumeration

CWE-20

CWE-918

Related Identifiers

CVE-2026-34207

GHSA-GRCC-6X37-WWGP

Affected Products

Typebot

References · 7

• 🔥 https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-grcc-6x37-wwgp · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34207.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-34207 · Security Note
• https://osv.dev/vulnerability/CVE-2026-34207 · Vendor Advisory
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 · Note
• https://github.com/baptisteArno/typebot.io/commit/23818bb0e54db23c456ee3fa6b12d82b2af848b8 · Note
• https://t.me/CVEtracker/54654 · Telegram Post