CVE-2024-5184: EmailGPT prompt injection that leaks system prompts and runs unwanted prompts

Summary

CVE-2024-5184 affects the EmailGPT service, which relies on an API service that lets a malicious user inject a direct prompt and take over the service logic. An attacker can force the AI service to leak its hard-coded system prompts and/or execute unwanted prompts, and any individual with access to the service can exploit it.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Prompt injection and jailbreaks

Related items

• LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading
• MediumGHSA-hmq2-7hp6-7crh: Banks: User-controlled prompt input can be parsed as privileged chat messagesSimilar attack · GitHub Advisory Database
• CriticalGHSA-9mp3-24cc-77mg: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsSimilar attack · GitHub Advisory Database
• Medium'AgentCorruption' Puts AWS Environments At Risk With Single PromptSimilar attack · Dark Reading
• MediumGHSA-4xxv-6wmf-xf45: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspaceSimilar attack · GitHub Advisory Database