CVE-2026-4399— 1millionbot Millie chatbot 安全漏洞

Multiple vulnerabilities in 1millionbot Millie chatbot

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving an affirmative response ('true'), the model executes the injected instruction), causing it to return prohibited information and information outside its intended context. Successful exploitation of this vulnerability could allow a malicious remote attacker to abuse the service for purposes other than those originally intended, or even execute out-of-context tasks using 1millionbot's resources and/or OpenAI's API key. This allows the attacker to evade the containment mechanisms implemented during LLM model training and obtain responses or chat behaviors that were originally restricted.

N/A

CWE-1427

1millionbot Millie chatbot 安全漏洞

1millionbot Millie chatbot是西班牙1millionbot公司的一个提供智能对话与自动化客户服务能力的聊天机器人系统。 1millionbot Millie chatbot存在安全漏洞，该漏洞源于用户可能使用布尔提示注入技术规避聊天限制，可能导致服务滥用或执行上下文外任务。

N/A

N/A