VYPR

Millie

by 1millionbot

CVEs (1)

  • CVE-2026-4400MedMar 31, 2026
    risk 0.42cvss 6.5epss 0.00

    Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ID. The vulnerability is present in the endpoint 'api.1millionbot.com/api/public/conversations/'…