Input Validation Issue in OpenSearch Security Analytics Plugin

CVE-2026-18952

What is CVE-2026-18952?

The OpenSearch Security Analytics Plugin has a critical input validation issue in its threat intelligence feed parser. This vulnerability allows authenticated remote users to exploit the threat intel source configuration endpoint. By crafting malicious URL parameters, an attacker could potentially execute a server-side request forgery (SSRF) attack, which may lead to unauthorized access to local files on the server. It is essential for users to monitor their OpenSearch installations and apply appropriate patches to mitigate this security flaw.

References