Findings

CVE-2026-27189

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.

Published Feb 21, 2026 · updated Jun 17, 2026 · opensift opensift

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insufficiently synchronized local JSON persistence flows, potentially causing concurrent operations to lose updates or corrupt local state across sessions/study/quiz/flashcard/wellness/auth stores. This issue has been fixed in version 1.1.3-alpha.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 21, 2026 · NIST NVD

    Detected

    OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insufficiently synchronized local JSON persistence flows, potentially causing concurrent operations to lose updates or corrupt local state across sessions/study/quiz/flashcard/wellness/auth stores. This issue has been fixed in version 1.1.3-alph

  2. Jun 17, 2026 · NIST NVD

    Updated

    OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insufficiently synchronized local JSON persistence flows, potentially causing concurrent operations to lose updates or corrupt local state across sessions/study/quiz/flashcard/wellness/auth stores. This issue has been fixed in version 1.1.3-alph

Affected

  • cpe opensift/opensiftversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-27189

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-27189

    OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below, use non-atomic and insufficiently synchronized local JSON persistence flows, potentially causing concurrent operations to lose updates or corrup

    nvd.nist.gov

References

CVE-2026-27189 · ZeroDay Findings