CVE-2026-48762: TypeBot is a chatbot builder tool. Prior to version 3.16.0, the OpenAI "Create Transcription" action handler fetches a u

TypeBot is a chatbot builder tool that had a vulnerability in versions before 3.16.0 where the OpenAI transcription feature didn't properly validate audio URLs, allowing attackers to perform SSRF (server-side request forgery, where a server is tricked into making requests to internal or restricted addresses) and access internal systems. An attacker could exploit this to make the server fetch content from arbitrary internal addresses and send it to OpenAI's Whisper API for transcription.