CVE-2026-83497

HighCVSS 8.8

Published: 31/08/2026(UTC)Updated: 03/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

42th percentile - higher than 42% of all known CVEs

Summary

Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint.

Risk Assessment

An authenticated user with low privileges can gain full control over the OpenSearch server, leading to compromise of data confidentiality, integrity, and availability.

Recommendation

Update the OpenSearch SQL plugin to a patched version. Additionally, restrict user privileges and monitor traffic to the plugins/sql endpoint.

Other vulnerabilities in OpenSearch SQL plugin

CVE-2026-18428High
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS