CVE-2026-63393 | OpenSearch SQL up to 2.19.5.9/3.6.9.9 SQL Plugin cursor deserialization

SecurityVulns
Yanac

A vulnerability was found in OpenSearch SQL up to 2.19.5.9/3.6.9.9. It has been declared as very critical. This affects an unknown part of the component SQL Plugin. Executing a manipulation of the argument cursor can lead to deserialization.

This vulnerability is tracked as CVE-2026-63393. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More