High severity7.5NVD Advisory· Published Oct 24, 2024· Updated Apr 15, 2026

CVE-2024-48140

Description

A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica Your AI Copilot powered by ChatGPT4 v6.3.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Butterfly Effect Limited/Monica Your AI Copilotllm-create
Range: =6.3.0

Patches

Vulnerability mechanics

References

chromewebstore.google.com/detail/monica-your-ai-copilot-po/ofpnmcalabcbjgholdjcjblkibolbppbnvd
github.com/soursec/CVEs/tree/main/CVE-2024-48140nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000