Everything Threat Times has reported about OpenSearch: 4 stories, newest first. Part of our Vulnerabilities coverage.
Amazon Web Services released updates on August 18, 2026, to fix a resource consumption vulnerability in OpenSearch Dashboards that could enable denial of service attacks.
A flaw in the OpenSearch SQL plugin lets authenticated users bypass grammar restrictions. AWS has released fixes for managed and self-hosted clusters.
Amazon fixed a stored cross-site scripting vulnerability in OpenSearch Dashboards that allowed authenticated users to execute arbitrary JavaScript via integration templates.
AWS warns that authenticated users can exploit CVE-2026-83497 to run arbitrary code on servers running specific versions of the open-source search engine.