PT-2026-41472 · Linux Foundation+2 · Opensearch+9

Published 2026-04-30 · Updated 2026-05-29

Positive Technologies (AI Summary)

CVSS v3.1

2.2

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenSearch versions prior to 2.19.4 OpenSearch versions prior to 3.2.0

Description A flaw in the OpenSearch Security plugin occurs during the handling of index rollover requests. When a request includes an explicit target index name, the security plugin fails to properly evaluate access control permissions for that target. Consequently, a user possessing indices:admin/rollover permissions on a source index can create a new index with a name they are not authorized to use, effectively rolling over to a target index name outside their authorized index patterns.

Recommendations Update to version 2.19.4. Update to version 3.2.0. Grant the indices:admin/rollover permission only to fully trusted users.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

GHSA-22VX-2X23-98W6

Affected Products

Opensearch

Opensearch-Ingest-Attachment-Plugin

Opensearch-Mapper-Annotated-Text-Plugin

Opensearch-Mapper-Murmur3-Plugin

Opensearch-Mapper-Size-Plugin

Opensearch-Repository-Hdfs-Plugin

Opensearch-Repository-S3-Plugin

Opensearch-Store-Mb-Plugin

Opensearch-Transport-Nio-Plugin

Org.Opensearch.Plugin:Opensearch-Security

References · 5

• https://osv.dev/vulnerability/GHSA-22vx-2x23-98w6 · Vendor Advisory
• https://github.com/opensearch-project/security/security/advisories/GHSA-22vx-2x23-98w6 · Note
• https://github.com/opensearch-project/security · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-opensearch-ghsa-22vx-2x23-98w6-7.3 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-opensearch-ghsa-22vx-2x23-98w6-8.0 · Note