Skip to content
Sign in
8.7 High

CVE-2026-18428 A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote…

Description

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.

Affected products and versions

Product Affected versions Fixed in
OpenSearch 2.13 2.13 → 3.5 No fix stated
OpenSearch 2.13 2.13 → 3.6 No fix stated

Other CVEs of OpenSearch

The 3 CVEs of OpenSearch →
CVE-2026-18952 Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might… 8.6 High CVE-2026-19311 Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated… 8.6 High
Track this CVE