CVE-2026-18428 – SQL Query Validation Bypass in OpenSearch Direct Query

​CVE ID :CVE-2026-18428

Published : Aug. 13, 2026, 5:32 p.m. | 57 minutes ago

Description :A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More