1millionbot Millie Chatbot — known CVE vulnerabilities

Every CVE whose affected-product data names 1millionbot Millie Chatbot, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-4399 — CVSS 7.5 (high): Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean…
• CVE-2026-4400 — CVSS 6.5 (medium): Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being…