Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-84942

Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The checkForFunctionProperty validation routine failed to recurse into arrays of objects, allowing a function property nested inside an array to bypass validation.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Aws Opensearch
Products
Amazon Opensearch Service Opensearch Dashboards
CVE-2026-83497

Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination

Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Amazon Aws Opensearch
Products
Amazon Opensearch Service Amazon Opensearch Service Opensearch
CVE-2026-77811

Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.

CVSS 4.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Aws Opensearch
Products
Amazon Opensearch Service Opensearch Dashboards Opensearch Dashboards Dashboards-observability Plugin
CVE-2026-18420

RCE via Prototype Pollution in OpenSearch Dashboards

Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enables remote code execution.  To remediate this issue, users should upgrade to OpenSearch Dashboards 3.8 or later.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Aws Opensearch
Products
Amazon Opensearch Service Opensearch Dashboards
CVE-2026-75897

Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Aws Opensearch
Products
Amazon Opensearch Service Opensearch Dashboards
CVE-2025-9624

OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Amazon Opensearch
Products
Opensearch Opensearch
CVE-2025-62371

OpenSearch Data Prepper plugins trusts all SSL certificates by default

OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. Prior to this fix, the OpenSearch sink and source plugins would automatically use a trust all SSL strategy when connecting to OpenSearch clusters if no certificate path was explicitly configured. This behavior bypasses SSL certificate validation, potentially allowing attackers to intercept and modify data in transit through man-in-the-middle attacks. The vulnerability affects connections to OpenSearch when the cert parameter is not explicitly provided. This issue has been patched in version 2.12.2. As a workaround, users can add the cert parameter to their OpenSearch sink or source configuration with the path to the cluster's CA certificate.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Amazon Opensearch
Products
Opensearch Data Prepper Opensearch