en
OpenSearch is a global open-source search and analytics project under the Linux Foundation. It develops a search and data-analysis suite, including a data store and search engine, a web visualization and management interface, and extensible plugins for analytics, observability, security, and machine learning. The software is commonly self-hosted or deployed through supported distribution and orchestration methods.
As of 10/22/2026, OpenSearch recorded 5 security vulnerabilities in the last 90 days across 3 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, OpenSearch Dashboards had the most security vulnerabilities in the OpenSearch ecosystem, with 3 vulnerabilities—approximately 60% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-84942Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCVE-2026-83497Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor PaginationCVE-2026-77811Stored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsCVE-2026-18420RCE via Prototype Pollution in OpenSearch DashboardsCVE-2026-75897Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards8 Results | Page 1 of 1
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |