# CVE-2026-49213: baptisteArno TypeBot SSRF bypass via IPv6 unspecified address

Source: https://junglewise.ai/threats/cve-2026-49213-baptistearno-typebot-ssrf-bypass-via-ipv6-unspecified-address  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-49213 · Severity: high · CVSS 8.1 · Published 2026-07-10

TypeBot, a chatbot builder tool, contains a security flaw that allows users with workspace editing permissions to bypass internal network protections. By using a specific network address format (IPv6 unspecified address), an attacker can force the TypeBot server to connect to internal services that are normally restricted. This could lead to the exposure of sensitive internal data or unauthorized access to other systems running on the same local network as the TypeBot server.

Technologies: [Typebot](https://junglewise.ai/threats/technologies/typebot). Vendors: [Typebot](https://junglewise.ai/threats/vendors/typebot).

## Quick answers

**Is CVE-2026-49213 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-49213 being exploited in the wild.

**How severe is CVE-2026-49213?** High severity, with a CVSS score of 8.1, published 10 July 2026.

**Which products and versions are affected?** Typebot < 3.17.2.

**Is there a fix for CVE-2026-49213?** A patch was published on 2026-05-24: Fix merged into main branch via PR #2511 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-49213 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-49213?** Check whether you run Typebot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in TypeBot's URL validation logic within `packages/lib/src/ssrf/validateHttpReqUrl.ts`. While the `validateIPAddress` function explicitly blocks various sensitive ranges (loopback, link-local, private IPv4, and IPv6 loopback), it fails to account for the IPv6 unspecified address `::` (or its expanded form `0:0:0:0:0:0:0:0`). In Node.js environments, a request to `http://[::]:<port>/` can successfully reach local services listening on the IPv6 wildcard address. An attacker with workspace editor or creator privileges can exploit this by configuring a server-side HTTP Request block or a guarded script fetch to probe or interact with internal HTTP services. This bypass affects the `safeKy` utility and can be triggered via public chat API endpoints such as `/v1/typebots/{publicId}/startChat`. The issue is resolved in version 3.17.2 by adding `::` to the blocked address list.

## Affected products

- baptisteArno typebot.io < 3.17.2

## Timeline

- 2026-05-24: patched: Fix merged into main branch via PR #2511
- 2026-06-17: advisory: Release v3.17.2 published
- 2026-06-27: advisory: GitHub Security Advisory GHSA-qx46-p88f-xxm3 published
- 2026-07-10: disclosed: CVE-2026-49213 published to NVD

## References

- [https://github.com/baptisteArno/typebot.io/commit/f56c3c3f771df13a8c11e88f500dfdd78981bed1](https://github.com/baptisteArno/typebot.io/commit/f56c3c3f771df13a8c11e88f500dfdd78981bed1)
- [https://github.com/baptisteArno/typebot.io/pull/2511](https://github.com/baptisteArno/typebot.io/pull/2511)
- [https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.2](https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.2)
- [https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-qx46-p88f-xxm3](https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-qx46-p88f-xxm3)

## Related threats

- [Typebot arbitrary local file read via Send Email attachment](https://junglewise.ai/threats/cve-2026-62865-typebot-arbitrary-local-file-read-via-send-email-attachment)
- [TypeBot custom domain deletion authorization bypass](https://junglewise.ai/threats/cve-2026-62861-typebot-custom-domain-deletion-authorization-bypass)
- [TypeBot privilege escalation in Google Sheets integration](https://junglewise.ai/threats/cve-2026-48767-typebot-privilege-escalation-in-google-sheets-integration)
- [TypeBot WhatsApp preview webhook authorization bypass](https://junglewise.ai/threats/cve-2026-48494-typebot-whatsapp-preview-webhook-authorization-bypass)
- [TypeBot CSV injection in result export](https://junglewise.ai/threats/cve-2026-47705-typebot-csv-injection-in-result-export)