Read the docs

1millionbot

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

1millionbot records in CISA KEV

No 1millionbot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Millie Chatbot 2 records MEDIUM

Records

3 records

TI-2026-03826 CVE-2026-4399 · GHSA-7649-76jc-fc5r

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority MEDIUM 43

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00269 Published 2026-03-31 No fix listed CWE-1427
TI-2026-03827 CVE-2026-4400 · GHSA-7h53-73g8-fjvr

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority LOW 30

Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00212 Published 2026-03-31 No fix listed CWE-639
TI-2026-62057 CVE-2026-91921 · GHSA-rf8x-cp2v-q2fg

Cross-Site Scripting (XSS) in 1millionbot’s AI chatbot platform

Priority LOW 24

Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side rendering engine of the 1millionbot AI Chat Platform.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00596 Published 2026-09-21 No fix listed CWE-79
Open these records in search →