What is the CVSS score of CVE-2026-27169?

CVE-2026-27169 has a CVSS 3.1 base score of 8.9 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-27169?

OpenShift versions 1.1.2-alpha and below contain a critical cross-site scripting (XSS) vulnerability that allows attackers to inject malicious code through the chat interface, potentially…

How to fix or mitigate CVE-2026-27169?

Within 24 hours: Inventory all OpenShift deployments and document version numbers; restrict chat feature access to trusted internal networks only. Within 7 days: Isolate or air-gap OpenShift instances handling sensitive data; escalate to vendor for patch timeline and interim security guidance. Within 30 days: Upgrade to patched version when available; conduct security audit of any chat interactions during vulnerable period for signs of exploitation.

AI / ML CVE-2026-27169

HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-02-21 security-advisories@github.com

XSS AI / ML Opensift

8.9

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.9 HIGH

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

CVE Published

Feb 21, 2026 - 00:16 nvd

HIGH 8.9

DescriptionGitHub Advisory

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when later viewed in authenticated sessions. An attacker who can influence stored study/quiz/flashcard content could trigger script execution in a victim’s browser, potentially performing actions as that user in the local app session. This issue has been fixed in version 1.1.3-alpha.

AnalysisAI

Stored cross-site scripting in OpenSift versions 1.1.2-alpha and below allows authenticated attackers to execute arbitrary JavaScript in victims' browsers by injecting malicious content into study materials, quizzes, or flashcards that render without proper HTML sanitization. An attacker with the ability to create or modify stored content could perform unauthorized actions within authenticated user sessions. No patch is currently available for this vulnerability.

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). Affects Opensift. OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when later viewed in authenticated sessions. An attacker who can influence stored study/quiz/flashcard content could trigger script execution in a victim’s browser, potentially performing actions as that user

RemediationAI

Fixed in version 1.1.3. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.