Skip to content
OpenAdvisories

Product · opensearch-project

sql

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-63393

    OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

    OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remote authenticated user with basic read/search permissions can provide a crafted `cur…

    opensearch-project sql