High severity7.5NVD Advisory· Published Oct 24, 2024· Updated Apr 15, 2026

CVE-2024-48141

Description

A prompt injection vulnerability in the chatbox of Zhipu AI CodeGeeX v2.17.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/soursec/CVEs/tree/main/CVE-2024-48141nvd
marketplace.visualstudio.com/itemsnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000