TypeBot versions before 3.17.0 have an SSRF vulnerability (CWE-918) in the WhatsApp status forwarding feature. The feature stores a webhook forwarding URL configured per workspace and later posts WhatsApp marketing or error status events to this URL from the server. The URL validation is generic and does not restrict internal or private network addresses. The forwarding code uses a raw HTTP client instance (ky) instead of the SSRF-protected safeKy client, enabling an attacker with workspace WhatsApp settings permissions to cause the server to issue HTTP requests to internal services, localhost, or metadata endpoints when the public WhatsApp webhook receives a status payload. The vulnerability is fixed in version 3.17.0.

An attacker with permission to configure WhatsApp settings in a workspace can exploit this SSRF vulnerability to make the TypeBot server send HTTP requests to internal or private network resources, potentially accessing sensitive internal services or metadata endpoints. The CVSS score is 5.4 (medium severity), indicating limited confidentiality and integrity impact without availability impact. There are no known exploits in the wild.

Upgrade TypeBot to version 3.17.0 or later, where this SSRF vulnerability is patched. Until then, restrict access to WhatsApp settings configuration to trusted users only. Patch status is not yet confirmed by a vendor advisory, but the description explicitly states version 3.17.0 fixes the issue.