CVE-2026-63393: falha de alta gravidade em opensearch-project sql
OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.5%
OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remote authenticated user with basic read/search permissions can provide a crafted `cursor` parameter to the `plugins/sql` endpoint and trigger unsafe deserialization of untrusted data, resulting in arbitrary code execution on the server. This issue is fixed in repository releases 2.19.6.0 and 3.7.0.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
opensearch-project · sqlReferências
https://github.com/opensearch-project/sql/commit/402a284f1dff3545236480b67f860aa93fb667dehttps://github.com/opensearch-project/sql/commit/9ab50384d3ad571a14211415fba2f6d26d4c80dbhttps://github.com/opensearch-project/sql/pull/5469https://github.com/opensearch-project/sql/pull/5572https://github.com/opensearch-project/sql/releases/tag/2.19.6.0https://github.com/opensearch-project/sql/releases/tag/3.7.0.0https://github.com/opensearch-project/sql/security/advisories/GHSA-r8cv-xvqm-4qj4