Read the docs
TI-2026-21611 Aliases CVE-2026-27169

OpenSift: Persistent XSS Chat Tool Rendering

Priority LOW 39CWE-116Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when later viewed in authenticated sessions. An attacker who can influence stored study/quiz/flashcard content could trigger script execution in a victim’s browser, potentially performing actions as that user in the local app session. This issue has been fixed in version 1.1.3-alpha.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00392 33rd percentileScored 2026-11-07
Fix Fixed OpenSift (OpenSift): 1.1.3-alpha

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenSiftOpenSiftbefore 1.1.3-alpha1.1.3-alphaPatch availableCNA
  • OpenSift VendorOpenSift Affected before 1.1.3-alpha Fixed in 1.1.3-alpha Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:*before 1.1.3VulnerableOpenSift
  • cpe:2.3:a:opensift:opensift:*:*:*:*:*:python:*:* Versions before 1.1.3 Vulnerable ·OpenSift

Remediation

  • Fix · CNA OpenSift (OpenSift) Fixed in 1.1.3-alpha

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-27169

References

Advisory 1

Other 1

  • TI-2026-22893 OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access CVSS 3.1HIGH 8.2
  • TI-2026-22892 OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operations CVSS 3.1HIGH 8.8
  • TI-2026-21612 OpenSift: SSRF risk in URL ingestion endpoint CVSS 3.1HIGH 7.1
  • TI-2026-22891 OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints CVSS 3.1MEDIUM 5.3
  • TI-2026-21626 OpenSift: Race-prone local persistence could cause state corruption/loss CVSS 3.1MEDIUM 6.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences