CVE-2026-48762

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-48762", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-22T19:39:05.356Z", "datePublished": "2026-08-11T20:40:31.980Z", "dateUpdated": "2026-08-13T15:10:11.880Z"}, "containers": {"cna": {"title": "TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763"}, {"name": "https://github.com/baptisteArno/typebot.io/pull/2428", "tags": ["x_refsource_MISC"], "url": "https://github.com/baptisteArno/typebot.io/pull/2428"}, {"name": "https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192", "tags": ["x_refsource_MISC"], "url": "https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192"}, {"name": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0"}], "affected": [{"vendor": "baptisteArno", "product": "typebot.io", "versions": [{"version": "< 3.16.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-11T20:40:31.980Z"}, "descriptions": [{"lang": "en", "value": "TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI \"Create Transcription\" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue."}], "source": {"advisory": "GHSA-h3v3-c6cq-q763", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T15:09:57.620407Z", "id": "CVE-2026-48762", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T15:10:11.880Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-48762", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T15:09:57.620407Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T15:10:05.979Z"}}], "cna": {"title": "TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler", "source": {"advisory": "GHSA-h3v3-c6cq-q763", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "baptisteArno", "product": "typebot.io", "versions": [{"status": "affected", "version": "< 3.16.0"}]}], "references": [{"url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763", "name": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/baptisteArno/typebot.io/pull/2428", "name": "https://github.com/baptisteArno/typebot.io/pull/2428", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192", "name": "https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0", "name": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI \"Create Transcription\" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-11T20:40:31.980Z"}}}, "cveMetadata": {"cveId": "CVE-2026-48762", "state": "PUBLISHED", "dateUpdated": "2026-08-13T15:10:11.880Z", "dateReserved": "2026-05-22T19:39:05.356Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-11T20:40:31.980Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "typebot.io", "vendor": "baptisteArno", "versions": [{"status": "affected", "version": "< 3.16.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI \"Create Transcription\" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue."}, {"lang": "es", "value": "TypeBot es una herramienta de creaci\u00f3n de chatbots. Antes de la versi\u00f3n 3.16.0, el gestor de acciones \u2019Create Transcription\u2019 de OpenAI obtiene una URL de audio proporcionada por el usuario usando \u201cfetch()\u201d sin aplicar la protecci\u00f3n SSRF que existe en otras partes de la base de c\u00f3digo. Un atacante puede dirigir al servidor para realizar solicitudes HTTP a direcciones internas arbitrarias y a localhost. El contenido obtenido se pasa a la API de OpenAI Whisper y el resultado de la transcripci\u00f3n se devuelve al atacante. La versi\u00f3n 3.16.0 corrige el problema."}], "id": "CVE-2026-48762", "lastModified": "2026-10-23T20:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48762", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T15:09:57.620407Z", "version": "2.0.3"}}]}, "published": "2026-08-11T21:17:36.677", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192"}, {"source": "security-advisories@github.com", "url": "https://github.com/baptisteArno/typebot.io/pull/2428"}, {"source": "security-advisories@github.com", "url": "https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.16.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "typebot.io", "source": "cna", "vendor": "baptisteArno"}, "product": "typebot.io", "vendor": "baptistearno"}], "created": "2026-08-12T12:45:02.793667+00:00", "updated": "2026-08-12T20:15:03.495653+00:00", "vendors": ["baptistearno", "baptistearno$PRODUCT$typebot.io"]}