CVE-2026-83497

A flaw was found in the OpenSearch SQL plugin. A remote authenticated user with basic read/search permissions can exploit this vulnerability by sending a specially crafted cursor parameter to the plugins/sql endpoint. This unrestricted deserialization of untrusted data allows the attacker to...