{"data":{"id":"f7cbecf5-68cb-42f4-97f6-2c502c849375","title":"CVE-2026-27169: OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions…","summary":"OpenSift versions 1.1.2-alpha and below render untrusted user and model content in chat tool UI surfaces using unsafe HTML interpolation, leading to XSS. An attacker who can influence stored study, quiz or flashcard content can make it run JavaScript when a victim views it in an authenticated session, potentially acting as that user in the local app.","solution":"Fixed in version 1.1.3-alpha.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-27169","publishedAt":"2026-02-21T00:16:16.810Z","cveId":"CVE-2026-27169","cweIds":["CWE-79","CWE-116"],"cvssScore":"8.9","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenSift"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenSift stored XSS through chat tool UI content rendering","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00392,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:28.620Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}