OpenSift vulnerabilities
6 published CVEs name OpenSift among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28677
OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access
OpenSift · OpenSift
High8.2 - CVE-2026-28676
OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operations
OpenSift · OpenSift
High8.8 - CVE-2026-28675
OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints
OpenSift · OpenSift
Medium5.3 - CVE-2026-27189
OpenSift: Race-prone local persistence could cause state corruption/loss
OpenSift · OpenSift
Medium6.6 - CVE-2026-27170
OpenSift: SSRF risk in URL ingestion endpoint
OpenSift · OpenSift
High7.1 - CVE-2026-27169
OpenSift: Persistent XSS Chat Tool Rendering
OpenSift · OpenSift
High8.9