Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-39965: TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks

CVE-2026-39965 · published 5 months ago

Summary

Original advisory text

TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Open Redirect Bypass as the HTTP Request block and Code block validate the initial request URL via validateHttpReqUrl() to block private IPs and cloud metadata hostnames. However, the HTTP clients (ky and fetch) follow 302 redirects without re-validating the redirect destination. An authenticated user can point a bot block to an attacker-controlled server that responds with a redirect to an internal IP, causing the Typebot server to reach internal services. An authenticated Typebot user can reach AWS metadata (169.254.169.254), private subnets, and container-internal services. Exploitable to extract cloud IAM credentials or probe internal APIs inaccessible from the internet. This issue has been fixed in version 3.16.0.

References

https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 URL
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39965... Vendor Advisory
https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-jxv3-m939-w9... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-39965 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.7 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-918Server-Side Request Forgery (SSRF)

Timeline

Published22 May 2026

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2026-39965 · NVD

CVE-2026-39965 · OSV

GHSA-jxv3-m939-w95c · GHSA

Track software like this

Free during beta