CVE-2026-48762

TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192
https://github.com/baptisteArno/typebot.io/pull/2428
https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0
https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763

Configurations

No configuration.

History

23 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) TypeBot es una herramienta de creación de chatbots. Antes de la versión 3.16.0, el gestor de acciones ’Create Transcription’ de OpenAI obtiene una URL de audio proporcionada por el usuario usando “fetch()” sin aplicar la protección SSRF que existe en otras partes de la base de código. Un atacante puede dirigir al servidor para realizar solicitudes HTTP a direcciones internas arbitrarias y a localhost. El contenido obtenido se pasa a la API de OpenAI Whisper y el resultado de la transcripción se devuelve al atacante. La versión 3.16.0 corrige el problema.

Information

Published : 2026-08-11 21:17

Updated : 2026-10-23 20:10

NVD link : CVE-2026-48762

Mitre link : CVE-2026-48762

CVE.ORG link : CVE-2026-48762

JSON object : View

Products Affected

No product.

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2026-48762", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48762", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T15:09:57.620407Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "baptisteArno", "product": "typebot.io", "versions": [{"status": "affected", "version": "< 3.16.0"}]}]}], "published": "2026-08-11T21:17:36.677", "references": [{"url": "https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/pull/2428", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI \"Create Transcription\" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue."}, {"lang": "es", "value": "TypeBot es una herramienta de creaci\u00f3n de chatbots. Antes de la versi\u00f3n 3.16.0, el gestor de acciones \u2019Create Transcription\u2019 de OpenAI obtiene una URL de audio proporcionada por el usuario usando \u201cfetch()\u201d sin aplicar la protecci\u00f3n SSRF que existe en otras partes de la base de c\u00f3digo. Un atacante puede dirigir al servidor para realizar solicitudes HTTP a direcciones internas arbitrarias y a localhost. El contenido obtenido se pasa a la API de OpenAI Whisper y el resultado de la transcripci\u00f3n se devuelve al atacante. La versi\u00f3n 3.16.0 corrige el problema."}], "lastModified": "2026-10-23T20:10:00.160", "sourceIdentifier": "security-advisories@github.com"}