OpenSift, an AI research tool, incorrectly constructed file paths in its storage helpers before version 1.6.3-alpha, allowing an attacker to inject path-like values that bypassed base-directory containment checks. This flaw permits read, write, or delete operations on arbitrary files on the host filesystem. Successful exploitation would let an adversary disclose sensitive data, corrupt or erase files, and potentially gain privileges if the application process has elevated rights. The weakness is classified as CWE‑22, a path traversal vulnerability with high potential for information compromise.

Vulnerable versions of OpenSift prior to 1.6.3-alpha are affected. The issue arises in the OpenSift application built with Python, which uses the open-source opensift package. No specific operating system or platform pieces are limited; the flaw exists wherever the vulnerable storage helpers are used in a deployment of the affected OpenSift release.

The CVSS score of 8.8 indicates a high severity level. EPSS is reported as less than 1 %, implying that while the likelihood of public exploitation is currently low, the vulnerability remains present and could be leveraged in targeted attacks. The vendor has patched the issue in release 1.6.3‑alpha, but the flaw is not listed in the CISA KEV catalog, which suggests no widely disclosed exploits at present. Likely attack vectors involve supplying crafted file path parameters via the application’s API or user interface, then triggering storage operations that treat those parameters unsafely.