Skip to content
OpenAdvisories

Product · OpenSearch

OpenSearch

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-83497

    Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination

    Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter …

    amazon OpenSearch OpenSearch Amazon OpenSearch Service
  • High 8.3
    CVE-2025-9624

    OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS

    A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.

    OpenSearch OpenSearch opensearch-2 opensearch Ubuntu Wolfi Maven