CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route
Opensearch Dashboards ยท 2026-10-21
Actions
Technical Details
| Affected Versions | 1.3.0 through 3.7.0, OpenSearch 1.3, 2.11, 2.13, 2.15, 2.17, 2.19, 3.1, 3.3, 3.5, Kibana 7.7.1 through 7.10.2 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-75897 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update OpenSearch Dashboards to version 3.8.0 or later, and apply the latest service software update for Amazon OpenSearch Service to address the security vulnerability (CVE-2026-75897).
For Platform Teams
Deploy the patched versions of OpenSearch Dashboards and Amazon OpenSearch Service to maintain the security and stability of your OpenSearch infrastructure.
For Executives
Implement the security patch for OpenSearch Dashboards to mitigate the risk of denial of service attacks and ensure the stability and security of your OpenSearch deployments.
Source
Related Opensearch Dashboards Updates
- CVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards (2026-10-21)
- Amazon RDS Custom now supports the latest Cumulative Update and GDR updates for Microsoft SQL Server (2026-10-19)
- PostgreSQL 19 RC1 is now available in Amazon RDS Database Preview Environment (2026-10-15)
- AWS Agent Registry now supports custom metadata for registry records (2026-10-13)
- Amazon RDS now supports the latest CU for Microsoft SQL Server (2026-10-13)