CVE-2026-34207

🗓️ 22 May 2026 17:12:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 35 Views🌐 WEB

TypeBot SSRF bypass before 3.16.0 enables DNS-resolved hostnames to reach loopback and private networks.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-34207	22 May 202617:12	–	attackerkb
CNNVD	Typebot 安全漏洞	22 May 202600:00	–	cnnvd
Cvelist	CVE-2026-34207 TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation	22 May 202617:12	–	cvelist
GithubExploit	Exploit for CVE-2026-34207	26 Jun 202612:45	–	githubexploit
EUVD	EUVD-2026-31470	22 May 202617:12	–	euvd
NVD	CVE-2026-34207	22 May 202617:16	–	nvd
OSV	CVE-2026-34207 TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation	22 May 202617:12	–	osv
Packet Storm	📄 TypeBot Server-Side Request Forgery	26 Jun 202600:00	–	packetstorm
Positive Technologies	PT-2026-42802	22 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-34207	5 Jun 202619:21	–	redhatcve

Vulners

Node

baptistearno typebot.ioRange<3.16.0

[
  {
    "vendor": "baptisteArno",
    "product": "typebot.io",
    "versions": [
      {
        "version": "< 3.16.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/baptisteArno/typebot.io/commit/23818bb0e54db23c456ee3fa6b12d82b2af848b8
github	www.github.com/baptisteArno/typebot.io/security/advisories/GHSA-grcc-6x37-wwgp
github	www.github.com/baptisteArno/typebot.io/releases/tag/v3.16.0

Parameter	Position	Path	Description	CWE
options.webhook.url	request body	ssrf-repro.example:8000/	SSRF vulnerability: validation occurs on hostname text, while final destination is determined after DNS, allowing access to loopback/private targets.	CWE-918, CWE-20

17 Jun 2026 10:38Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.6

EPSS0.00239

SSVC