{"data":{"id":"81bc3ad3-5c20-4611-80d7-2c907118f9bd","title":"CVE-2024-48139: A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all…","summary":"CVE-2024-48139 is a prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95. A crafted message lets an attacker access and exfiltrate all previous and subsequent chat data between the user and the AI assistant. The NVD assessment has not yet been provided, and the source maps the weakness to CWE-77 (Command Injection).","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-48139","publishedAt":"2024-10-24T19:15:15.050Z","cveId":"CVE-2024-48139","cweIds":["CWE-77"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Blackbox AI v1.3.95"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Blackbox AI prompt injection in chatbox exposes chat data","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0048,"epssCheckedAt":"2026-11-05T06:10:15.254Z","kevDateAdded":null,"advisoryAliases":["GHSA-jjq3-cw48-pqmx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-05T06:10:29.185Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}