PT-2026-29219 · 1Millionbot+1 · 1Millionbot Millie+1

CVE-2026-4399 · Publicado 2026-03-31 · Atualizado 2026-04-21

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions 1millionbot Millie chatbot (affected versions not specified)

Description A prompt injection issue exists in the 1millionbot Millie chatbot. This occurs when a user bypasses chat restrictions using Boolean prompt injection techniques, constructing a question to elicit an affirmative ('true') response that triggers the execution of injected instructions. Successful exploitation allows a remote attacker to misuse the service, obtain prohibited information, or execute unintended tasks leveraging 1millionbot’s resources and/or the OpenAI API key. This bypasses containment mechanisms during LLM model training, enabling restricted responses or behaviors. The API key used by 1millionbot could be compromised.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Enumeração de Fraquezas

CWE-1427

CWE-77

Identificadores relacionados

CVE-2026-4399

Produtos afetados

1Millionbot Millie

Openai Api

Referências · 4

• https://twitter.com/Muawin_AI/status/2046625620063658281 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2039004496324427997 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4399 · Nota de Segurança
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-1millionbot-millie-chatbot · Nota