CVE-2026-18428
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.
- Published Aug 13, 2026
- CVSS 8.7 high
- 1.0% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- CVE-2026-18428 - OpenSearch SQL Plugin - Async Query Validation Bypass AWS Security Bulletins ·