CVE-2026-77811: medium-severity vulnerability in AWS Amazon OpenSearch Service
Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Published · Updated
Follow this CVE+ Monitor Amazon OpenSearch Service+ Monitor OpenSearch Dashboards dashboards-observability plugin
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.2epss 0.5%
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Affected products
AWS · Amazon OpenSearch ServiceOpenSearch · OpenSearch Dashboards dashboards-observability pluginRelated CVEs — AWS Amazon OpenSearch Service
In the same product, most dangerous first.
CVE-2026-18420HIGHRCE via Prototype Pollution in OpenSearch DashboardsEPSS 1.0%CVE-2026-75897HIGHUncontrolled Resource Consumption in Capabilities Route in OpenSearch DashboardsEPSS 0.7%CVE-2026-84942MEDIUMStored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsEPSS 0.5%