CVE-2026-64686

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery (SSRF) vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling test_connection route validates incoming endpoint URLs via isValidURL() against configured endpointDeniedIPs and endpointAllowlistedSuffixes lists, but fetchDataSourceMetaData accepts the same input shape without performing this validation. An authenticated user can supply an internal or loopback endpoint to probe internal network resources. This issue has been patched in versions 2.19.6 and 3.7.0.

• CWE-918

• https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/2.19.6
• https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.7.0
• https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-6qp6-3675-ffr3

Published

Nov 11, 2026

Last Modified

Nov 11, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-64677Anki is a program for creating and reviewing flashcards. Pri…5.9
• CVE-2026-64678NOsql Object (NO2 a.k.a Nitrite) database is an open source …9.8
• CVE-2026-64679Atlantis is a self-hosted golang application that listens fo…8.1
• CVE-2026-64682AstroBlocks is a block-first CMS for Astro projects. Prior t…9.8
• CVE-2026-64684RMCP is an official Rust SDK for the Model Context Protocol.…6.8
• CVE-2026-64685ImageMagick is free and open-source software used for editin…5.3
• CVE-2026-6469Incorrect ownership assignment in PostgreSQL ALTER TABLE ALT…3.8
• CVE-2026-64691A buffer overflow was addressed with improved size validatio…9.8
• CVE-2026-64692An out-of-bounds read was addressed with improved bounds che…7.1
• CVE-2026-64693A type confusion issue was addressed with improved checks. T…5.5
• CVE-2026-64694An integer overflow was addressed with improved input valida…9.8
• CVE-2026-64695The issue was addressed with improved memory handling. This …9.8