{"data":{"id":"679dd479-a4f6-4f02-b241-f8012d86fa81","title":"CVE-2026-27189: OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions…","summary":"CVE-2026-27189 affects OpenSift versions 1.1.2-alpha and below. Its local JSON persistence flows are non-atomic and insufficiently synchronized, so concurrent operations can lose updates or corrupt local state across the session, study, quiz, flashcard, wellness and auth stores. The weakness is classified as CWE-362 and CWE-367.","solution":"Fixed in 1.1.3-alpha.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-27189","publishedAt":"2026-02-21T00:16:17.140Z","cveId":"CVE-2026-27189","cweIds":["CWE-362","CWE-367"],"cvssScore":"6.6","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenSift"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenSift local JSON persistence race condition loses updates and corrupts state","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00124,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:11:05.942Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-26","CAPEC-27","CAPEC-29"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}