OpenSearch is an open-source, community-driven search and analytics suite derived from Elasticsearch. It provides solutions for search, data observability, data ingestion, and more.

OpenSearch

OpenSearch Dashboards is an open-source data visualization and user interface tool designed to work with the OpenSearch search and analytics engine. Developed by the OpenSearch Project community (originally initiated by Amazon Web Services as a fork of Kibana), its primary use case is to explore, analyze, and visualize indexed data in real time. It is widely used for building interactive operational dashboards, monitoring application logs, and managing cluster configurations.

OpenSearch Dashboards

OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue.

CVE-2024-43794

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-45321	CRITICAL	9.6	JavaScript	@tanstack/react-start-client	Yes	Yes	May 12, 2026
CVE-2025-9624	HIGH	8.3	Java	opensearch	No	Yes	Nov 25, 2025
CVE-2026-43826	MEDIUM	6.5	Python	apache-airflow-providers-opensearch	No	Yes	May 11, 2026
CVE-2024-43794	MEDIUM	6.1	OpenSearch	cpe:2.3:a:amazon:opensearch	No	Yes	Aug 23, 2024
CVE-2023-45807	MEDIUM	5.4	Java	cpe:2.3:a:amazon:opensearch	No	Yes	Oct 16, 2023

CVE-2024-43794:
OpenSearch vulnerability analysis and mitigation

6.1

Related OpenSearch vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2024-43794: OpenSearch vulnerability analysis and mitigation