PT-2025-42388 · Opensearch · Opensearch Data Prepper

Published 2025-10-15 · Updated 2025-12-04 · CVE-2025-62371

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenSearch Data Prepper versions prior to 2.12.2

Description OpenSearch Data Prepper is an open source data collector for observability data. The OpenSearch sink and source plugins in Data Prepper trust all SSL certificates by default when no certificate path is provided. This bypasses SSL certificate validation, potentially allowing attackers to intercept and modify data in transit through man-in-the-middle attacks when connecting to OpenSearch clusters without explicitly configuring a certificate path. The issue affects connections to OpenSearch when the cert parameter is not explicitly provided.

Recommendations Versions prior to 2.12.2 should be updated to version 2.12.2 or later. As a workaround, add the cert parameter to the OpenSearch sink or source configuration with the path to the cluster's CA certificate.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-62371

GHSA-43FF-RR26-8HX4

Affected Products

Opensearch Data Prepper

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62371.json · Exploit
• https://github.com/opensearch-project/data-prepper/commit/98fcf0d0ff9c18f1f7501e11dbed918814724b99 · Patch
• https://github.com/opensearch-project/data-prepper/security/advisories/GHSA-43ff-rr26-8hx4 · Vendor Advisory
• https://github.com/opensearch-project/data-prepper/commit/db11ce8f27ebca018980b2bca863f7173de9ce56 · Patch
• https://github.com/opensearch-project/data-prepper/commit/b0386a5af3fb71094ba6c86cd8b2afc783246599 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-62371 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62371 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-43ff-rr26-8hx4 · Vendor Advisory
• https://github.com/opensearch-project/data-prepper · Note
• https://twitter.com/CVEnew/status/1978545023852703748 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1o87w9u/resumen_diario_de_vulnerabilidades_16102025 · Reddit Post
• https://t.me/cveNotify/144769 · Telegram Post
• https://t.me/CVEtracker/35032 · Telegram Post
• https://twitter.com/CveTodo/status/1978528380011024691 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1978655626847785167 · Twitter Post