EUVD-2026-56783Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Anonymous remote input (AV:N/PR:N) but execution needs admin to export and open the file in vulnerable spreadsheet config, so UI:R and AC:H; scope-changed onto the workstation with realistically limited, prompt-gated impact (C/I/A:L).
Primary rating from Vendor (github).
CVSS VectorVendor: github
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later executed when an administrator opens the exported CSV in spreadsheet software such as Microsoft Excel or LibreOffice Calc. Version 3.17.0 patches the issue.
AnalysisAI
CSV formula injection in Typebot 3.16.1's result-export feature lets remote, unauthenticated chatbot users embed spreadsheet formulas (e.g. =, +, -, @) into form input fields that are written unsanitized into exported CSV files; when an administrator opens the export in Excel or LibreOffice Calc, the injected formula executes in the admin's context. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires that a Typebot 3.16.1 instance expose a bot/form whose collected answers (or header labels) are later exported via the result-export feature, and that an administrator opens the exported CSV in formula-evaluating spreadsheet software (Microsoft Excel or LibreOffice Calc). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H = 9.6) is aggressive for a CSV/formula-injection issue: the network vector and no-privileges metrics are defensible because any anonymous respondent can submit malicious input, and the scope change reflects that impact lands on a different system (the admin's workstation/spreadsheet app). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker interacts with a public Typebot form and enters a malicious payload such as =cmd|'/c calc'!A1 (or a DDE/HYPERLINK formula) into a text answer field. The response is stored and later included verbatim when an administrator exports all results to CSV; upon opening the file in Excel or LibreOffice Calc, the formula is evaluated in the admin's context, potentially triggering command execution or data exfiltration. … |
| Remediation | Vendor-released patch: upgrade to Typebot v3.17.0 (https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0), which adds the sanitizeCsvCell helper (commit 89682dd, PR #2493) that prefixes formula-leading cells with a single quote; see advisory GHSA-p52m-h5qg-8p8w. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, upgrade Typebot to version 3.17.0 or immediately restrict export permissions to administrators-only to prevent unauthenticated users from triggering the injection vector. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Code Injection
View allShare
External POC / Exploit Code
Leaving vuln.today