Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: 1millionbot Component: Millie Chatbot Clear all filters
TI-2026-03827 CVE-2026-4400 · GHSA-7h53-73g8-fjvr

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority LOW 30

Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00212 Published 2026-03-31 No fix listed CWE-639
TI-2026-03826 CVE-2026-4399 · GHSA-7649-76jc-fc5r

Multiple vulnerabilities in 1millionbot Millie chatbot

Priority MEDIUM 43

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00269 Published 2026-03-31 No fix listed CWE-1427