Opensift
CVE-2026-28677
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessSubmit crafted URL to ingest pipeline
-
ExploitBypass incomplete host restrictions
-
ExecutionAccess internal service via credentialed URL or redirect
-
ImpactExfiltrate sensitive data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | OpenSift versions prior to 1.6.3-alpha with URL ingest pipeline enabled; attacker can submit arbitrary URLs to the ingest function; deployment must expose the ingest endpoint to unauthenticated network access (AV:N/PR:N/UI:N) |
| Impact | CVSS 8.2 (HIGH). Attack vector: Network. Complexity: Low. Privileges required: None. User interaction: None. Exploitable via remote/network. |
| Exploit ScenarioDerived | A remote attacker could exploit this vulnerability to compromise the affected system. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
OpenSift versions prior to 1.6.3-alpha are vulnerable to server-side request forgery (SSRF) attacks through the URL ingest pipeline, which fails to properly validate credentialed URLs, non-standard ports, and cross-host redirects in non-localhost deployments. An unauthenticated remote attacker can exploit this to access internal resources and potentially exfiltrate sensitive data from the affected system. No patch is currently available for this vulnerability.
Earlier versions of this analysis (1)
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. versions up to 1.6.3 is affected by server-side request forgery (ssrf) (CVSS 8.2).
RemediationAI
Fixed in version 1.6.3. Restrict network access to the affected service where possible.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability (CWE-918: Server-Side Request Forgery (SSRF)) affects OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.. OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local host checks existed, missing restrictions for credentialed URLs, non-standard ports, and cross-host redirects left SSRF-class abuse paths in non-localhost deployments. This issue has been patched in version 1.6.3-alpha.
Know when Opensift gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
DescriptionGitHub Advisory
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local host checks existed, missing restrictions for credentialed URLs, non-standard ports, and cross-host redirects left SSRF-class abuse paths in non-localhost deployments. This issue has been patched in version 1.6.3-alpha.
Executive ViewAI
OpenShift deployments running versions prior to 1.6.3-alpha are vulnerable to Server-Side Request Forgery (SSRF) attacks through the URL ingest pipeline, potentially allowing attackers to access internal systems, exfiltrate sensitive data, or pivot to backend infrastructure. This vulnerability poses immediate risk to organizations using OpenShift for AI-driven data analysis, particularly those handling sensitive datasets or operating in regulated environments.
Disable the URL ingest pipeline feature entirely if not critical to operations. Implement network segmentation preventing OpenShift from reaching internal systems, private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), and metadata services. Deploy WAF rules blocking requests to non-standard ports and credential-based URLs. Restrict outbound connections to whitelisted external domains only. Monitor and log all URL ingest requests for suspicious patterns. Implement rate limiting on the ingest endpoint.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Affected Products (CPE)GitHub Advisory
Related Vulnerabilities in OpenSift SSRF and Information Disclosure
View all 2Stored cross-site scripting in OpenSift versions 1.1.2-alpha and below allows authenticated attackers to execute arbitra
OpenShift versions prior to 1.6.3-alpha contain a path traversal vulnerability in multiple storage helpers that fail to
OpenSift versions 1.1.2-alpha and below allow authenticated attackers to abuse the URL ingest feature's overly permissiv
OpenShift versions 1.1.2-alpha and below suffer from a race condition in local JSON persistence that allows authenticate
Exploit-DB