---
id: CVE-2026-48762
title: TypeBot is a chatbot builder tool
summary: >-
  TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create
  Transcription" action handler fetches a user-supplied audio URL using
  `fetch()` without applying the SSRF protection that exists elsewhere in the
  codebase. An…
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'
cwe:
  - CWE-918
published: '2026-08-11'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T20:46:28.353'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-48762'
references:
  - url: >-
      https://github.com/baptisteArno/typebot.io/commit/a33051755f9e734596498851d5f61bd2e171f192
    label: security-advisories@github.com
  - url: 'https://github.com/baptisteArno/typebot.io/pull/2428'
    label: security-advisories@github.com
  - url: 'https://github.com/baptisteArno/typebot.io/releases/tag/v3.16.0'
    label: security-advisories@github.com
  - url: >-
      https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-h3v3-c6cq-q763
    label: security-advisories@github.com
tags:
  - nvd
epss: 0.00223
epssPercentile: 0.1315
ingestedAt: '2026-09-09T21:22:45.530Z'
---

## Overview

TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a user-supplied audio URL using `fetch()` without applying the SSRF protection that exists elsewhere in the codebase. An attacker can direct the server to make HTTP requests to arbitrary internal addresses and localhost. The fetched content is passed to the OpenAI Whisper API and the transcription result is returned to the attacker. Version 3.16.0 fixes the issue.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.