CVE-2026-39965
TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks
Description
TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Open Redirect Bypass as the HTTP Request block and Code block validate the initial request URL via validateHttpReqUrl() to block private IPs and cloud metadata hostnames. However, the HTTP clients (ky and fetch) follow 302 redirects without re-validating the redirect destination. An authenticated user can point a bot block to an attacker-controlled server that responds with a redirect to an internal IP, causing the Typebot server to reach internal services. An authenticated Typebot user can reach AWS metadata (169.254.169.254), private subnets, and container-internal services. Exploitable to extract cloud IAM credentials or probe internal APIs inaccessible from the internet. This issue has been fixed in version 3.16.0.
INFO
Published Date :
May 22, 2026, 6:16 p.m.
Last Modified :
July 23, 2026, 4:10 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | MITRE-CVE | ||||
| CVSS 3.1 | HIGH | [email protected] |
Solution
- Update Typebot to version 3.16.0 or later.
- Review and re-validate all HTTP request block URLs.
- Restrict outbound network access from the Typebot server.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-39965.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-39965 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-39965
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-39965 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-39965 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Jul. 23, 2026
Action Type Old Value New Value Added Translation Title: typebot.io de baptisteArno, Description: TypeBot es una herramienta de creación de chatbots. Las versiones 3.15.2 y anteriores contienen una SSRF a través de un bypass de redirección abierta, ya que el bloque de solicitud HTTP y el bloque de código validan la URL de solicitud inicial a través de validateHttpReqUrl() para bloquear IPs privadas y nombres de host de metadatos de la nube. Sin embargo, los clientes HTTP (ky y fetch) siguen redirecciones 302 sin revalidar el destino de la redirección. Un usuario autenticado puede apuntar un bloque de bot a un servidor controlado por el atacante que responde con una redirección a una IP interna, haciendo que el servidor de Typebot acceda a servicios internos. Un usuario autenticado de Typebot puede acceder a metadatos de AWS (169.254.169.254), subredes privadas y servicios internos del contenedor. Explotable para extraer credenciales IAM de la nube o sondear APIs internas inaccesibles desde internet. Este problema ha sido solucionado en la versión 3.16.0. -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'baptisteArno', 'product': 'typebot.io', 'versions': [{'status': 'affected', 'version': '< 3.16.0'}]}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-39965', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-05-22T18:25:44.199883Z'} -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
May. 22, 2026
Action Type Old Value New Value Added Reference https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-jxv3-m939-w95c -
New CVE Received by [email protected]
May. 22, 2026
Action Type Old Value New Value Added Description TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Open Redirect Bypass as the HTTP Request block and Code block validate the initial request URL via validateHttpReqUrl() to block private IPs and cloud metadata hostnames. However, the HTTP clients (ky and fetch) follow 302 redirects without re-validating the redirect destination. An authenticated user can point a bot block to an attacker-controlled server that responds with a redirect to an internal IP, causing the Typebot server to reach internal services. An authenticated Typebot user can reach AWS metadata (169.254.169.254), private subnets, and container-internal services. Exploitable to extract cloud IAM credentials or probe internal APIs inaccessible from the internet. This issue has been fixed in version 3.16.0. Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Added CWE CWE-918 Added Reference https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0 Added Reference https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-jxv3-m939-w95c