PrivacyHigh
CVE-2024-45989: Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to…
- Occurred
- Sep 26, 2024
- Published
- Sep 26, 2024
- Source
- NVD CVE
Summary
Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. A prompt injection allows an attacker to modify chatbot answer with an unloaded image that exfiltrates the user's sensitive chat data of the current session to a malicious third-party or attacker-controlled server.
Tags
- CVE
- CVE-2024-45989
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Vulnerability allows unauthorized exfiltration of sensitive chat data via prompt injection.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8