CVE-2026-4399— Multiple vulnerabilities in 1millionbot Millie chatbot
Quick assessment
Affected
1millionbot Millie chat
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
1millionbot Millie chatbot是西班牙1millionbot公司的一个提供智能对话与自动化客户服务能力的聊天机器人系统。 1millionbot Millie chatbot存在安全漏洞，该漏洞源于用户可能使用布尔提示注入技术规避聊天限制，可能导致服务滥用或执行上下文外任务。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1566.001 · Spearphishing Attachment
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-4399
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities in 1millionbot Millie chatbot
Source: CVE Program / CVE List V5
Vulnerability Description
Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving an affirmative response ('true'), the model executes the injected instruction), causing it to return prohibited information and information outside its intended context. Successful exploitation of this vulnerability could allow a malicious remote attacker to abuse the service for purposes other than those originally intended, or even execute out-of-context tasks using 1millionbot's resources and/or OpenAI's API key. This allows the attacker to evade the containment mechanisms implemented during LLM model training and obtain responses or chat behaviors that were originally restricted.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1427
Source: CVE Program / CVE List V5
Vulnerability Title
1millionbot Millie chatbot 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
1millionbot Millie chatbot是西班牙1millionbot公司的一个提供智能对话与自动化客户服务能力的聊天机器人系统。 1millionbot Millie chatbot存在安全漏洞，该漏洞源于用户可能使用布尔提示注入技术规避聊天限制，可能导致服务滥用或执行上下文外任务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| 1millionbot | Millie chat | 3.6.0 | - |
|
II. Public POCs for CVE-2026-4399
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-4399
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-1427
-
CVE-2026-70331
Microsoft Edge for iOS Spoofing Vulnerability -
CVE-2026-78379
Consent bypass in python_repl tool via batch kwargs forwardi -
CVE-2026-75130
Context7 2.1.2 Prompt Injection via Custom AI Instructions -
CVE-2026-21832
HCL AION is affected by multiple security vulnerabilities. -
CVE-2026-18733
Prompt injection bypasses shell tool consent gate in Strands
V. Comments for CVE-2026-4399
No comments yet