CVE-2026-48483

TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL and later POSTs WhatsApp marketing/error status events to it from the server. The stored URL is only validated as a generic URL in settings, but the forwarding code uses the raw `ky` instance instead of the repository's SSRF-protected `safeKy` client. A workspace user who can configure WhatsApp settings can therefore make the Typebot server issue HTTP requests to internal services, private-network hosts, localhost, or metadata-style endpoints whenever the public WhatsApp production webhook receives a status payload that should be forwarded. Version 3.17.0 patches the issue.

• CWE-918

• https://github.com/baptisteArno/typebot.io/commit/30cbc616e00efabb193c3221b36a0d417152592c
• https://github.com/baptisteArno/typebot.io/pull/2497
• https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-5c92-7q58-4rgx
• https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-5c92-7q58-4rgx

Published

Aug 11, 2026

Last Modified

Aug 11, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48449Adobe Campaign Classic (ACC) is affected by an Incorrect Aut…10
• CVE-2026-4845A flaw has been found in dameng100 muucmf 1.9.5.20260309. Im…4.3
• CVE-2026-4846A vulnerability has been found in dameng100 muucmf 1.9.5.202…4.3
• CVE-2026-4847A vulnerability was found in dameng100 muucmf 1.9.5.20260309…4.3
• CVE-2026-4848A vulnerability was determined in dameng100 muucmf 1.9.5.202…4.3
• CVE-2026-48480The netty incubator codec.bhttp is a java language binary ht…6.6
• CVE-2026-48485Quest Bot is an opensource Discord Bot. Prior to version 1.1…2.1
• CVE-2026-48487Zeroconf is a pure Python implementation of multicast DNS se…5.3
• CVE-2026-48488phpMyFAQ is an open source FAQ web application. Prior to ver…2.7
• CVE-2026-48489Symfony is a PHP framework for web and console applications …7.5
• CVE-2026-4849A vulnerability was identified in code-projects Simple Laund…6.1
• CVE-2026-48491Traefik is an HTTP reverse proxy and load balancer. From 3.7…10