Skip to content
Sign in
8.6 High

CVE-2026-18952 Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might…

Description

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.

Affected products and versions

Product Affected versions Fixed in
OpenSearch 2.15 2.15.0 → < 3.5.0 3.5.0
OpenSearch 2.15 2.15.0 → < 3.7.0 3.7.0

Other CVEs of OpenSearch

The 3 CVEs of OpenSearch →
CVE-2026-18428 A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote… 8.7 High CVE-2026-19311 Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated… 8.6 High
Track this CVE