Read the docs

1millionbot

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

1millionbot records in CISA KEV

No 1millionbot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Millie Chatbot 2 records MEDIUM

Records

2 records in Millie Chatbot · all components

TI-2026-03826 CVE-2026-4399 · GHSA-7649-76jc-fc5r

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority MEDIUM 43

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00269 Published 2026-03-31 No fix listed CWE-1427
TI-2026-03827 CVE-2026-4400 · GHSA-7h53-73g8-fjvr

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority LOW 30

Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00212 Published 2026-03-31 No fix listed CWE-639
Open these records in search →