CVE-2026-49213 TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution
Attackers can bypass SSRF protections using IPv6 unspecified addresses to access local services via TypeBot's HTTP request features.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-49213?
CVE-2026-49213 is a high-severity server-side request forgery vulnerability in baptisteArno typebot.io, published on 10 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address :: because validateIPAddress blocks local, metadata, and private ranges but does not block :: or its expanded form. A workspace editor or creator can configure a server-side HTTP Request block or guarded script fetch to make the Typebot server connect to local HTTP services through safeKy, including flows triggered by POST /v1/typebots/{publicId}/startChat or POST /v1/sessions/{sessionId}/continueChat. This issue is fixed in version 3.17.2.
Weakness: CWE-918
Which versions are affected by CVE-2026-49213?
How do I fix CVE-2026-49213?
No fix has been published for CVE-2026-49213 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-49213 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-49213 exists.
Sources
Also known as GHSA-qx46-p88f-xxm3.