CVE-2024-5184 Prompt Injection in EmailGPT
Attackers can inject prompts to leak system instructions or execute unwanted commands in the EmailGPT AI service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-5184?
CVE-2024-5184 is a high-severity code injection vulnerability in EmailGPT, published on 5 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can exploit the issue by forcing the AI service to leak the standard hard-coded system prompts and/or execute unwanted prompts. When engaging with EmailGPT by submitting a malicious prompt that requests harmful information, the system will respond by providing the requested data. This vulnerability can be exploited by any individual with access to the service.
Weakness: CWE-74
Which versions are affected by CVE-2024-5184?
It affects 1 product.
Products include Emailgpt Emailgpt.
How do I fix CVE-2024-5184?
No fix has been published for CVE-2024-5184 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2024-5184 being exploited?
There is no known exploitation of CVE-2024-5184 in the wild and no public exploit code.
Sources
Also known as GHSA-27m7-5vm3-3prg.