CVE-2026-18952
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.
Risk Assessment
Risk of unauthorized access to internal network resources and local files, potentially leading to data leakage or further attacks.
Recommendation
Apply vendor patches and restrict access to the threat intel source configuration endpoint.
Original NVD description (English source)
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.