CVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Opensearch Dashboards ยท 2026-10-21
Actions
Technical Details
| Affected Versions | before 3.4, before 2.19.6 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-77811 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update OpenSearch Dashboards to versions 3.4 or 2.19.6 and apply the latest service software update for Amazon OpenSearch Service to patch the stored cross-site scripting vulnerability (CVE-2026-77811).
For Platform Teams
Deploy the latest versions of OpenSearch Dashboards and ensure all Amazon OpenSearch Service domains are updated to the latest service software to address the stored cross-site scripting vulnerability (CVE-2026-77811).
For Executives
Implement immediate updates to address the stored cross-site scripting vulnerability (CVE-2026-77811) in OpenSearch Dashboards to mitigate security risks and protect user data integrity.
Source
Related Opensearch Dashboards Updates
- CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route (2026-10-21)
- Amazon RDS Custom now supports the latest Cumulative Update and GDR updates for Microsoft SQL Server (2026-10-19)
- PostgreSQL 19 RC1 is now available in Amazon RDS Database Preview Environment (2026-10-15)
- AWS Agent Registry now supports custom metadata for registry records (2026-10-13)
- Amazon RDS now supports the latest CU for Microsoft SQL Server (2026-10-13)