CVE-2026-33712

Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the preview chat endpoint (POST /api/v1/typebots/{typebotId}/preview/startChat) allows unauthenticated users to achieve Server-Side Request Forgery (SSRF) by supplying a custom typebot definition with server-side code blocks. The fetch function exposed inside the isolated-vm sandbox calls Node.js native fetch without the SSRF validation (validateHttpReqUrl) that protects the HTTP Request block. This bypasses all SSRF mitigations added after GHSA-8gq9-rw7v-3jpr. Exploitation of this unauthenticated SSRF vulnerability can lead to cloud credential theft, internal network access and data exfiltration for any self-hosted Typebot deployments and hosted services. This issue has been fixed in version 3.16.0.

• CWE-862
• CWE-918

• https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-vc2q-r6rq-ggj9
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-vc2q-r6rq-ggj9

Published

May 22, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33707Chamilo LMS is a learning management system. Prior to 1.11.3…9.8
• CVE-2026-33708Chamilo LMS is a learning management system. Prior to 1.11.3…6.5
• CVE-2026-33709JupyterHub is software that allows one to create a multi-use…6.1
• CVE-2026-3371The Tutor LMS – eLearning and online course solution plugin …4.3
• CVE-2026-33710Chamilo LMS is a learning management system. Prior to 1.11.3…7.5
• CVE-2026-33711Incus is a system container and virtual machine manager. Inc…7.8
• CVE-2026-33713n8n is an open source workflow automation platform. Prior to…8.8
• CVE-2026-33714Chamilo is an open-source learning management system (LMS). …7.2
• CVE-2026-33715Chamilo LMS is an open-source learning management system. In…7.2
• CVE-2026-33716WWBN AVideo is an open source video platform. In versions up…9.4
• CVE-2026-33717WWBN AVideo is an open source video platform. In versions up…8.8
• CVE-2026-33718OpenHands is software for AI-driven development. Starting in…9.9