Vulnerability details
CVE-2026-27170
OpenSift OpenSift
OpenSift: SSRF risk in URL ingestion endpoint
CVSS 3.1
7.1High
Official description
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local network resources from the OpenSift host process when ingesting attacker-controlled URLs. This issue has been fixed in version 1.1.3-alpha. To workaround when using trusted local-only exceptions, use OPENSIFT_ALLOW_PRIVATE_URLS=true with caution.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.1High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| OpenSift | OpenSift | < 1.1.3-alpha | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://github.com/OpenSift/OpenSift/security/advisories/GHSA-3w2r-hj5p-h6pp x_refsource_CONFIRM
- https://github.com/OpenSift/OpenSift/releases/tag/v1.1.3-alpha x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-02-21
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.2%
Probability of exploitation in 30 days
10.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-20Improper Input Validation
- CWE-918Server-Side Request Forgery (SSRF)