Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-75897

Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMZN

Description

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenSearch OpenSearch Dashboards

Default version status: unaffected

  • 1.3 to ≤ 3.7.0affected

AWS Amazon OpenSearch Service

Default version status: unaffected

  • 1.3 to ≤ 3.5affected

References