7.5
High
CVE-2026-75897 Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload…
Description
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSearch Dashboards 1.3 | 1.3 → 3.7.0 | No fix stated |
| Amazon OpenSearch Service 1.3 | 1.3 → 3.5 | No fix stated |
References
- aws.amazon.com aws.amazon.com
- opensearch.org opensearch.org
Timeline
- Published
- Last modified