CVE-2025-9624 | OpenSearch up to 3.1.x Query String recursion

November 26, 2025 Yanac

A vulnerability has been found in OpenSearch up to 3.1.x and classified as problematic. This vulnerability affects unknown code of the component Query String Handler. Performing manipulation results in uncontrolled recursion.

This vulnerability is reported as CVE-2025-9624. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More