CVE-2026-91921

Name of the Vulnerable Software and Affected Versions 1millionbot AI Chat Platform (affected versions not specified)

Description Inadequate input sanitization in the client-side rendering engine allows an unauthenticated remote user to execute Cross-Site Scripting (XSS). By sending messages containing Markdown syntax and specific unsanitized content blocks, an attacker can cause external hyperlinks to be rendered in the web interface. The impact is restricted to the user's own interactive session, with no identified compromise of internal infrastructure, administrative panels, or third-party data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.