Skip to content

Vendor

1millionbot vulnerabilities

3 published CVES affecting 1millionbot, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of 1millionbot alerts

Products

Latest 1millionbot CVEs

Newest publication first

  1. CVE-2026-91921 Cross-Site Scripting (XSS) in 1millionbot’s AI chatbot platform

    Published
    MediumCVSS 5.1 EPSS 0.60%

    Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side rendering engine of the 1millionbot AI Chat Platform. An unauthenticated remote user could cause external hyperlinks to be rendered in the web interface by sending messages containing...

  2. CVE-2026-4400 Multiple vulnerabilities in 1millionbot Millie chatbot

    Published
    HighCVSS 7.0 EPSS 0.21%

    Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/' and,...

  3. CVE-2026-4399 Multiple vulnerabilities in 1millionbot Millie chatbot

    Published
    HighCVSS 8.7 EPSS 0.27%

    Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a question in such a way that, upon receiving an affirmative response ('true'), the model executes the in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.