CVE-2026-75897

Description

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.

CVSS Vector

References

• https://aws.amazon.com/security/security-bulletins/2026-082-aws/
• https://opensearch.org/downloads/