What’s Vulnerable › Vulnerabilities

CVE-2024-48139

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-24 · updated 2026-06-17
• Weakness: CWE-77

Description

A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

Affected products

• Blackbox Ai: 1.3.95

References

• https://github.com/soursec/CVEs/tree/main/CVE-2024-48139
• https://marketplace.visualstudio.com/items?itemName=Blackboxapp.blackbox

Get alerted when CVE-2024-48139 or the next vulnerability affects your stack