OpenSift vulnerabilities
We track 4 vulnerabilities in OpenSift products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2026.
Latest OpenSift vulnerabilities
- 8.2 High severity
OpenSift: Server-Side Request Forgery
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local
- 8.8 High severity
OpenSift: Improper Limitation of a Pathname to a Restricted Directory
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, multiple storage helpers used path construction patterns that did not uniformly enforce base-directory containment. This creat
- 7.1 High severity
OpenSift is an AI study tool that sifts through large datasets using semantic search and…
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potenti
- 8.9 High severity
OpenSift: Improper Neutralization of Input During Web Page Generation
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored