Threats affecting pkg:npm/1millionbot/millie-chat

CVE-2026-4399 is a prompt injection vulnerability in the 1millionbot Millie chatbot version 3.6.0. It allows attackers to bypass chat restrictions by crafting inputs that cause the model to execute unintended instructions, potentially revealing prohibited information or performing out-of-context tasks. This vulnerability can lead to abuse of the chatbot service and misuse of associated resources, including OpenAI's API key. The vulnerability has a high severity score of 8.7 but no known exploits in the wild have been reported. No official patch or remediation guidance is currently available.