Github Opensearch vulnerabilities
3 vulnerabilities
Known vulnerabilities in Github Opensearch, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-19311awsopensearch+1
EPSS score0.58%
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters.CVE-2026-18428awsopensearch+1EPSS score1.00%
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.CVE-2026-18952awsopensearch+1EPSS score0.52%
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.