What’s Vulnerable › Products

OpenSift vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your OpenSift version is affected

Latest OpenSift vulnerabilities

• CVE-2026-28677 — OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access (CVSS 8.2)
• CVE-2026-28676 — OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operations (CVSS 8.8)
• CVE-2026-28675 — OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints (CVSS 5.3)
• CVE-2026-27189 — OpenSift: Race-prone local persistence could cause state corruption/loss (CVSS 5.8)
• CVE-2026-27170 — OpenSift: SSRF risk in URL ingestion endpoint (CVSS 7.1)
• CVE-2026-27169 — OpenSift: Persistent XSS Chat Tool Rendering (CVSS 8.9)