CVE Catalog
CVE-2026-75897
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.50%
41th percentile - higher than 41% of all known CVEs
Summary
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.
Risk Assessment
An attacker could overload the server, causing service unavailability, potentially disrupting analytics systems.
Recommendation
Upgrade OpenSearch Dashboards to a version that limits request size and implement security measures at the proxy level.
Original NVD description (English source)
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.