Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-48764— TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass

Quick assessment

Affected
baptisteArno typebot.io
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

baptisteArno typebot.io是baptisteArno的开源在线表单构建工具。 baptisteArno typebot.io 3.17.2之前版本存在服务端请求伪造漏洞，该漏洞源于SSRF验证存在检查时间与使用时间差距，允许DNS重绑定绕过，攻击者可通过提供URL利用DNS重绑定强制服务器连接到私有或元数据地址，导致服务器端访问私有网络服务、云元数据端点及其他内部HTTP目标，具体影响包括元数据泄露、访问内部管理面板、凭证窃取等。

CVSS 8.2 · High EPSS 0.45% · P37

Affected Version Matrix 1

VendorProduct Version RangeStatus
baptisteArno typebot.io < 3.17.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-48764

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass
Source: CVE Program / CVE List V5
Vulnerability Description
TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether the resolved IP belongs to a forbidden range allowing for DNS rebinding bypass. The root cause is a time-of-check to time-of-use gap in the SSRF guard. The validator resolves the hostname and approves it, but the later request path performs a fresh resolution and connects to whatever IP the hostname maps to at that moment. The actual outbound request is then performed later using the original hostname, without pinning the validated IP to the network connection. An attacker who can supply a URL to a public bot that performs a server-side HTTP Request block or server-side script fetch can use DNS rebinding to pass the initial validation and still force the server to connect to a private or metadata address during the real request. This enables server-side access to private network services, cloud metadata endpoints, and other internal HTTP targets that the validator was intended to block. The exact downstream impact depends on the reachable internal services. Concrete consequences include metadata disclosure, access to internal admin panels, credential theft from metadata services, and further compromise through internal-only HTTP interfaces. This issue has been fixed in version 3.17.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
baptisteArno typebot.io 服务端请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
baptisteArno typebot.io是baptisteArno的开源在线表单构建工具。 baptisteArno typebot.io 3.17.2之前版本存在服务端请求伪造漏洞，该漏洞源于SSRF验证存在检查时间与使用时间差距，允许DNS重绑定绕过，攻击者可通过提供URL利用DNS重绑定强制服务器连接到私有或元数据地址，导致服务器端访问私有网络服务、云元数据端点及其他内部HTTP目标，具体影响包括元数据泄露、访问内部管理面板、凭证窃取等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
baptisteArno typebot.io < 3.17.2 -

II. Public POCs for CVE-2026-48764

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-48764

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-48764 (1)

Vendor Advisories for CVE-2026-48764 (1)

Vendor Pages for CVE-2026-48764 (1)

Same Patch Batch · baptisteArno · 2026-06-17 · 3 CVEs total

CVE-2026-48768 9.3 CRITICAL TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized
CVE-2026-48759 7.1 HIGH TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion)

IV. Related Vulnerabilities

Same product: typebot.io
Same vendor: baptisteArno
Same weakness: CWE-918

V. Comments for CVE-2026-48764

No comments yet

Leave a comment