CVE-2026-48762: TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler
TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using fetch() without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TypeBot (OpenAI "Create Transcription" action handler)to a version that resolves this vulnerability.Fixed in 3.16.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48762?
The severity of CVE-2026-48762 is categorized as medium with a score of 5.4.
How do I fix CVE-2026-48762?
To fix CVE-2026-48762, update TypeBot to version 3.16.0 or later.
What type of vulnerability is CVE-2026-48762?
CVE-2026-48762 is a Server-Side Request Forgery (SSRF) vulnerability.
Can CVE-2026-48762 be exploited remotely?
Yes, CVE-2026-48762 can be exploited remotely due to the nature of SSRF.
What component of TypeBot is affected by CVE-2026-48762?
CVE-2026-48762 affects the OpenAI 'Create Transcription' action handler in TypeBot.