CVE-2026-4399 in Millie Chatbot

Sumário (Inglês)

Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving an affirmative response ('true'), the model executes the injected instruction), causing it to return prohibited information and information outside its intended context. Successful exploitation of this vulnerability could allow a malicious remote attacker to abuse the service for purposes other than those originally intended, or even execute out-of-context tasks using 1millionbot's resources and/or OpenAI's API key. This allows the attacker to evade the containment mechanisms implemented during LLM model training and obtain responses or chat behaviors that were originally restricted.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsável

INCIBE

Reservar

18/03/2026

Divulgação

31/03/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354358	1millionbot Millie Chatbot Elevação de Privilégios	74	Não definido	Não definido	CVE-2026-4399

Fontes

• MITRE
• NVD
• CVE Details