A flaw in the Flint extension query handler of the OpenSearch SQL plugin allows an attacker who is authenticated and has async query privileges to send a specially crafted SQL query to the direct query endpoint. The vulnerability bypasses normal SQL query validation, permitting execution of arbitrary code on the underlying Apache Spark workers. This can lead to full compromise of the cluster’s data and compute resources, affecting confidentiality, integrity, and availability.

The issue affects OpenSearch deployments from AWS and GitHub that incorporate the OpenSearch SQL plugin. Specific product versions are not enumerated in the available data, but the references point to the release series 2.19.6 and 3.7.0 where the fix was applied.

The CVSS score of 8.7 indicates high severity, while the EPSS is not available and the vulnerability is not listed in the CISA KEV catalog. The attack requires authentication with async query capabilities, which may be granted to service roles or privileged users; the attacker can then trigger the bypass by issuing a crafted query to the direct query endpoint. Given the high CVSS and the availability of a functional exploit path in the plugin, the risk is significant for any exposed OpenSearch service.