Beveiligingsadvies

CVE-2026-18428

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 17:32:48
Laatst bijgewerkt 2026-08-13 17:57:51
Toegewezen door AMZN
CVSS-score 8.8
Status PUBLISHED

Beschrijving

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.