CVE-2026-18428 in OpenSearch
Sumário
de MITRE • 13/08/2026
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.
If you want to get best quality of vulnerability data, you may have to visit VulDB.