CVE-2026-64686 | OpenSearch Project OpenSearch Dashboards up to 2.19.5/3.6.x fetchDataSourceMetaData isValidURL server-side request forgery

A vulnerability described as problematic has been identified in OpenSearch Project OpenSearch Dashboards up to 2.19.5/3.6.x. This affects the function isValidURL of the component fetchDataSourceMetaData. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-64686. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More