[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-33712":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":24,"technologies":25,"references":26,"score":29,"epss_score":30,"epss_percentile":31,"is_kev":32,"cisa_kev_date_added":33,"cisa_kev_due_date":33,"cisa_ssvc":34,"attack_mappings":44,"exploits":75},2649,"CVE-2026-33712","EUVD-2026-31468","Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the preview chat endpoint (POST \u002Fapi\u002Fv1\u002Ftypebots\u002F{typebotId}\u002Fpreview\u002FstartChat) allows unauthenticated users to achieve Server-Side Request Forgery (SSRF) by supplying a custom typebot definition with server-side code blocks. The fetch function exposed inside the isolated-vm sandbox calls Node.js native fetch without the SSRF validation (validateHttpReqUrl) that protects the HTTP Request block. This bypasses all SSRF mitigations added after GHSA-8gq9-rw7v-3jpr. Exploitation of this unauthenticated SSRF vulnerability can lead to cloud credential theft, internal network access and data exfiltration for any self-hosted Typebot deployments and hosted services. This issue has been fixed in version 3.16.0.","2026-05-22T17:16:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":18,"privilegesRequired":18,"confidentialityImpact":17},"CHANGED","3.1",10,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N","HIGH","NONE","LOW",true,[22,23],"CWE-918","CWE-862",[],[],[27,28],"https:\u002F\u002Fgithub.com\u002FbaptisteArno\u002Ftypebot.io\u002Freleases\u002Ftag\u002Fv3.16.0","https:\u002F\u002Fgithub.com\u002FbaptisteArno\u002Ftypebot.io\u002Fsecurity\u002Fadvisories\u002FGHSA-vc2q-r6rq-ggj9",0.85,0.00447,0.37945,false,null,{"timestamp":35,"automatable":36,"tech_impact":37,"exploitation":38,"cisa_decision":39,"cisa_remediation_timeline":43},"2026-05-22T17:18:33.583327Z","yes","total","poc",{"vector":40,"decision":41,"priority":42},"CISAv1\u002FE:P\u002FA:Y\u002FT:T\u002FM:H\u002F2026-10-25T14:01:19.214108\u002F","attend","medium","3D",[45,51,60,67],{"name":46,"source":47,"tactics":48,"technique_id":50},"Exploit Public-Facing Application","attack_vector",[49],"initial-access","T1190",{"name":52,"source":53,"cwe_ids":54,"tactics":55,"capec_ids":57,"technique_id":59},"Exploitation for Stealth","capec",[23],[56],"stealth",[58],"CAPEC-665","T1211",{"name":61,"source":53,"cwe_ids":62,"tactics":63,"capec_ids":65,"technique_id":66},"Component Firmware",[23],[64,56],"persistence",[58],"T1542.002",{"name":68,"source":53,"cwe_ids":69,"tactics":70,"capec_ids":73,"technique_id":74},"Modify Authentication Process",[23],[71,72,64],"credential-access","defense-impairment",[58],"T1556",[76],{"link":28}]