CVE-2026-75897 — Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards

CVE-2026-75897

Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards PUBLISHED

Description (CNA)

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.

Affected (CNA)

Vendor / product	Versions
OpenSearch / OpenSearch Dashboards	affected 1.3 through 3.7.0
AWS / Amazon OpenSearch Service	affected 1.3 through 3.5

CWE

CWE-1284

References

https://aws.amazon.com/security/security-bulletins/2026-082-aws/
https://opensearch.org/downloads/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.