Is CVE-2026-33712 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-33712 being exploited in the wild.

How severe is CVE-2026-33712?

Critical severity, with a CVSS score of 10, published 22 May 2026.

Which products and versions are affected?

baptisteArno typebot.io <= 3.15.2.

Is there a fix for CVE-2026-33712?

A patch was published on 2026-04-08: Version 3.16.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-33712 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-33712?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33712: baptisteArno Typebot SSRF in preview chat endpoint

Q: Is there a fix for CVE-2026-33712?

A patch was published on 2026-04-08: Version 3.16.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-33712 attacked?

It is attacked over the network, in a hosted service.

Q: Am I affected by CVE-2026-33712?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33712 · Severity: critical · CVSS 10 · Published 2026-05-22

Typebot is an open-source chatbot builder used to create conversational interfaces. A security flaw in the chat preview feature allows unauthorized individuals to force the server to make requests to internal systems. This could allow an attacker to steal cloud service credentials, access private internal databases, or exfiltrate sensitive operational data, potentially leading to a full compromise of the hosting environment.

Quick answers

Is CVE-2026-33712 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-33712 being exploited in the wild.
How severe is CVE-2026-33712?: Critical severity, with a CVSS score of 10, published 22 May 2026.
Which products and versions are affected?: baptisteArno typebot.io <= 3.15.2.
Is there a fix for CVE-2026-33712?: A patch was published on 2026-04-08: Version 3.16.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-33712 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-33712?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A critical vulnerability exists in Typebot's preview chat endpoint (POST /api/v1/typebots/{typebotId}/preview/startChat) due to a combination of missing authorization and insufficient input validation. The `getTypebot` function in the bot engine skips authentication checks when a custom typebot object is provided in the request. Furthermore, the `fetch` function exposed within the `isolated-vm` sandbox environment lacks the `validateHttpReqUrl` checks used elsewhere in the application. An unauthenticated attacker can submit a crafted typebot definition containing server-side code blocks that use this unrestricted `fetch` to access internal network resources or cloud metadata services (e.g., AWS IMDS). This bypasses previous SSRF mitigations and has been addressed in version 3.16.0.

Affected products

baptisteArno typebot.io <= 3.15.2

Timeline

2026-04-08: patched: Version 3.16.0 released
2026-05-22: disclosed: GitHub Security Advisory published
2026-05-22: advisory: NVD published CVE-2026-33712

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.