Is CVE-2026-18428 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18428?

CVE-2026-18428 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-18428

Description

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.