What is the CVSS score of EUVD-2026-56783?

EUVD-2026-56783 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Typebot are affected by EUVD-2026-56783?

Typebot 3.16.1's CSV export feature is vulnerable to formula injection that allows unauthenticated remote attackers to execute code on administrator workstations when exported data is opened in…

How to fix or mitigate EUVD-2026-56783?

Within 24 hours, upgrade Typebot to version 3.17.0 or immediately restrict export permissions to administrators-only to prevent unauthenticated users from triggering the injection vector. Within 7 days, confirm all production instances are running 3.17.0 and validate that CSV exports no longer contain unsanitized user input that could execute as formulas. Within 30 days, review administrative workstation logs and email/document access patterns during the vulnerability window for signs of exploitation or lateral movement.

Typebot EUVD-2026-56783

| CVE-2026-47705 CRITICAL

Improper Neutralization of Formula Elements in a CSV File (CWE-1236)

2026-08-11 security-advisories@github.com

Microsoft Code Injection

9.6

CVSS 3.1 · Vendor: github

Severity by source

Vendor (github) PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

5.8 MEDIUM

Anonymous remote input (AV:N/PR:N) but execution needs admin to export and open the file in vulnerable spreadsheet config, so UI:R and AC:H; scope-changed onto the workstation with realistically limited, prompt-gated impact (C/I/A:L).

3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

4.0 AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Primary rating from Vendor (github).

CVSS VectorVendor: github

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Source Code Evidence Fetched

Aug 11, 2026 - 19:47 vuln.today

Analysis Generated

Aug 11, 2026 - 19:47 vuln.today

CVE Published

Aug 11, 2026 - 18:17 cve.org

CRITICAL 9.6

DescriptionCVE.org

TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later executed when an administrator opens the exported CSV in spreadsheet software such as Microsoft Excel or LibreOffice Calc. Version 3.17.0 patches the issue.

AnalysisAI

CSV formula injection in Typebot 3.16.1's result-export feature lets remote, unauthenticated chatbot users embed spreadsheet formulas (e.g. =, +, -, @) into form input fields that are written unsanitized into exported CSV files; when an administrator opens the export in Excel or LibreOffice Calc, the injected formula executes in the admin's context. Tracked as CWE-1236 with a vendor CVSS of 9.6 (scope-changed), it is patched in 3.17.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

Typebot is an open-source, self-hostable chatbot builder that collects end-user responses and lets operators export accumulated results as CSV. The root cause is CWE-1236 (Improper Neutralization of Formula Elements in a CSV File): the export pipeline copied user-supplied answer text and header labels directly into cells without neutralizing leading formula characters. The GitHub commit (89682dd) confirms the affected code paths - ExportAllResultsDialog.tsx, SelectionToolbar.tsx, streamAllResultsToCsv.ts, and streamAllResultsToCsvV2.ts - and introduces a new packages/results/src/sanitizeCsvCell.ts helper that prefixes any cell beginning with =, +, -, @, tab, or carriage return with a single quote so spreadsheet software treats it as literal text. The vulnerability is not in Typebot's own execution but in the downstream trust that spreadsheet applications place in CSV cell contents, making it a classic client-side/consumer-side injection realized when the exported file is opened.

RemediationAI

Vendor-released patch: upgrade to Typebot v3.17.0 (https://github.com/baptisteArno/typebot.io/releases/tag/v3.17.0), which adds the sanitizeCsvCell helper (commit 89682dd, PR #2493) that prefixes formula-leading cells with a single quote; see advisory GHSA-p52m-h5qg-8p8w. If immediate upgrade is not possible, compensating controls include: instruct administrators to open result exports in a text editor or import them as text/data (rather than double-clicking into Excel/Calc, which auto-evaluates formulas) - trade-off is a slower workflow; disable automatic formula/DDE execution and macro auto-run in the spreadsheet software used to review exports; and treat all exported CSVs as untrusted, reviewing cells that begin with =, +, -, @, tab, or carriage return before opening. These mitigations reduce the execution risk on the consumer side but do not remove the injected content from stored results, so patching to 3.17.0 remains the definitive fix.