TypeBot versions before 3.17.2 contain a SSRF vulnerability due to an incomplete IP address validation in the shared SSRF validator. The validator blocks local, metadata, and private IP ranges but fails to block the IPv6 unspecified address (::) and its expanded form. This allows a workspace editor or creator to configure server-side HTTP Request blocks or guarded script fetches that cause the server to connect to local HTTP services, potentially leading to unauthorized internal network access. The vulnerability affects flows triggered by specific API endpoints such as POST /v1/typebots/{publicId}/startChat and POST /v1/sessions/{sessionId}/continueChat. The vulnerability is addressed in TypeBot version 3.17.2.

An attacker with workspace editor or creator privileges can exploit this SSRF vulnerability to make the TypeBot server initiate HTTP connections to local network services that are otherwise inaccessible externally. This can lead to unauthorized access or interaction with internal services, potentially exposing sensitive data or enabling further attacks. The CVSS score of 8.1 indicates high severity with high confidentiality and integrity impact but no availability impact.

This vulnerability is fixed in TypeBot version 3.17.2. Users should upgrade to version 3.17.2 or later to remediate this issue. No official patch or remediation level is explicitly stated beyond this version update. Since this is not a cloud service, users must apply the update themselves. Until upgraded, restrict workspace editor and creator privileges to trusted users to reduce exploitation risk.