Skip to content
OpenAdvisories

Product · amazon

Amazon OpenSearch Service

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-83497

    Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination

    Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter …

    amazon OpenSearch OpenSearch Amazon OpenSearch Service