CVE-2026-18428 — SQL Query Validation Bypass in OpenSearch Direct Query
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary …
Published: 2026-08-13 · CVSS: 8.7 · CVSS 4.0
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7