Skip to main content

OpenSearch Alerting EUVDEUVD-2026-57420

| CVE-2026-19311 HIGH
Undefined Behavior for Input to API (CWE-475)
2026-08-12 AMZN GHSA-4v32-vrp2-28jp
Information Disclosure Opensearch
8.6
CVSS 4.0 · Vendor: AMZN
Share

Severity by source

Vendor (AMZN) PRIMARY
8.6 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.1 HIGH

Network-accessible API requiring only authenticated low-privilege access; high confidentiality and integrity impact from arbitrary index read/write; no availability impact described and scope unchanged.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (AMZN).

CVSS VectorVendor: AMZN

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 12, 2026 - 19:21 vuln.today
CVE Published
Aug 12, 2026 - 18:34 cve.org
HIGH 8.6

DescriptionCVE.org

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters.

AnalysisAI

Missing authorization in the Execute Monitor API of the Amazon OpenSearch Alerting plugin allows any authenticated remote user to read, modify, or delete arbitrary index data by supplying crafted inline monitor requests with attacker-controlled data source and input index parameters. The flaw bypasses index-level permission enforcement, making it a meaningful privilege escalation risk in multi-tenant or shared OpenSearch deployments. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Authenticate to OpenSearch with low-privilege credentials
Delivery
Enumerate or identify sensitive target index names
Exploit
Craft inline monitor POST request with arbitrary input index parameter
Execution
Submit request to Execute Monitor API endpoint
Persist
Missing authorization check bypassed - server queries attacker-specified index
Impact
Exfiltrate, modify, or delete arbitrary index data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid authenticated session on the OpenSearch cluster, confirmed by the CVSS 4.0 PR:L metric - unauthenticated access is insufficient. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.6 with vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N reflects a realistic and meaningful threat profile: the vulnerability is network-accessible, requires no complex preconditions, and needs only authenticated access (PR:L) to exploit. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An authenticated low-privilege user on a shared OpenSearch cluster - such as a developer with read access to their own application indices - crafts a POST request to the Execute Monitor API specifying an inline monitor with input index parameters pointing to sensitive indices (e.g., financial records or security audit logs) they should not access. Because the API does not validate the caller's permissions against the specified index targets, the response returns data from the restricted index or allows the attacker to modify or delete records within it. …
Remediation Upgrade to Amazon OpenSearch Service version 3.5 or later as referenced by the AWS What's New announcement (https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-opensearch-service-version-3-5/). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory all systems running Amazon OpenSearch with the Alerting plugin enabled and confirm their current versions against vendor advisories to identify exposure scope. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Opensearch

View all
CVE-2022-31115 HIGH POC
8.8 Jun 30

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. Rated high severity (CVSS 8.8), this vuln
CVE-2025-9624 HIGH POC
8.3 Nov 25

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string input
CVE-2026-18428 HIGH
8.7 Aug 13

Remote code execution via the OpenSearch SQL plugin's Flint extension query handler exposes Apache Spark workers to arbi
CVE-2023-23612 HIGH
8.8 Jan 26

OpenSearch is an open source distributed and RESTful search engine. Rated high severity (CVSS 8.8), this vulnerability i
CVE-2026-18952 HIGH
8.6 Aug 12

Server-side request forgery and local file read in the OpenSearch Security Analytics plugin exposes authenticated users

CVE-2022-35980 HIGH
7.5 Aug 12

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated high seve
CVE-2023-23613 MEDIUM
6.5 Jan 26

OpenSearch is an open source distributed and RESTful search engine. Rated medium severity (CVSS 6.5), this vulnerability
CVE-2022-41918 MEDIUM
6.3 Nov 15

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. Rated medium severity (CVSS 6.3), this v
CVE-2023-31141 MEDIUM
5.9 May 08

OpenSearch is open-source software suite for search, analytics, and observability applications. Rated medium severity (C
CVE-2023-45807 MEDIUM
5.4 Oct 16

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 202
CVE-2023-25806 MEDIUM
5.3 Mar 02

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Rated medium se
CVE-2023-23933 MEDIUM
4.3 Feb 03

OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. Rated medium severity (CVSS

Same weakness CWE-475 – Undefined Behavior for Input to API

View all
CVE-2024-10569 HIGH POC
7.5
CVE-2024-3099 MEDIUM POC
5.4
CVE-2025-47865 HIGH
7.5
CVE-2026-42009 HIGH
7.5
CVE-2024-20380 HIGH
7.5
CVE-2020-7925 HIGH
7.5
CVE-2023-4874 MEDIUM
6.5
CVE-2023-2253 MEDIUM
6.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-57420 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy