CVE-2026-34207

🗓️ 22 May 2026 17:12:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

TypeBot SSRF bypass before 3.16.0 enables DNS-resolved hostnames to reach loopback and private networks.

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2026-34207	22 May 202617:12	–	attackerkb
Circl	CVE-2026-34207	13 Jul 202622:00	–	circl
CNNVD	Typebot security vulnerabilities	22 May 202600:00	–	cnnvd
Cvelist	CVE-2026-34207 TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation	22 May 202617:12	–	cvelist
GithubExploit	Exploit for CVE-2026-34207	26 Jun 202612:45	–	githubexploit
EUVD	EUVD-2026-31470	22 May 202617:12	–	euvd
Kitploit	CVE-2026-34207	22 Oct 202610:01	–	kitploit
Mend	CVE-2026-34207	22 May 202617:12	–	mend
NVD	CVE-2026-34207	22 May 202617:16	–	nvd
Packet Storm	📄 TypeBot Server-Side Request Forgery	26 Jun 202600:00	–	packetstorm

Vulners

Node

baptistearno typebot.ioRange<3.16.0

[
  {
    "vendor": "baptisteArno",
    "product": "typebot.io",
    "versions": [
      {
        "version": "< 3.16.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/baptisteArno/typebot.io/commit/23818bb0e54db23c456ee3fa6b12d82b2af848b8
github	www.github.com/baptisteArno/typebot.io/releases/tag/v3.16.0
github	www.github.com/baptisteArno/typebot.io/security/advisories/GHSA-grcc-6x37-wwgp

Parameter	Position	Path	Description	CWE
options.webhook.url	nested	ssrf-repro.example:8000/	SSRF due to hostname-based validation that does not resolve DNS before allowing outbound requests, enabling requests to loopback/private targets.	CWE-918, CWE-20

23 Jul 2026 16:10Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.6

EPSS0.00415

SSVC