Opensearch

8 CVEs across 4 Opensearch products. Browse Opensearch vulnerabilities, severities, and proof-of-concept exploits.

Opensearch products with known CVEs

ProductCVEs
Opensearch Dashboards3
Observability2
Opensearch2
Opensearch Dashboards Dashboards-Observability Plugin1
Opensearch CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-84942High8.72026-09-08Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write perm…
CVE-2026-83497High8.82026-08-31Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic re…
CVE-2026-77811High8.72026-08-21Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSear…
CVE-2026-18420High8.82026-08-20Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary cod…
CVE-2026-75897High7.52026-08-18Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote atta…
CVE-2025-9624High7.52025-11-25A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch…
CVE-2024-39901Medium4.22024-07-09OpenSearch Observability is collection of plugins and applications that visualize data-driven events. An issue in the OpenSearch observability plugins allows u…
CVE-2024-39900Medium5.42024-07-09OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows uni…