CVE-2026-48762: TypeBot OpenAI transcription action server-side request forgery via audio URL

Summary

TypeBot, a chatbot builder tool, prior to version 3.16.0 has a flaw in the OpenAI "Create Transcription" action handler. The handler fetches a user-supplied audio URL with `fetch()` without the SSRF protection used elsewhere in the codebase, so an attacker can make the server send HTTP requests to arbitrary internal addresses and localhost. The fetched content goes to the OpenAI Whisper API, and the transcription result is returned to the attacker. The weakness is classified as CWE-918.

Mitigation

Version 3.16.0 fixes the issue.

Related items

• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSimilar attack · The Hacker News
• HighCVE-2026-63651: LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect…Similar attack · NVD/CVE Database
• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
• InfoLocation Matters: Sparse Latent-Variance Attacks for Face Privacy against Diffusion PersonalizationSimilar attack · Arxiv (cs.RO + cs.CV security)
• MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySimilar attack · MSRC Security Update Guide