The vulnerability is an unrestricted deserialization flaw in the cursor pagination component of the OpenSearch SQL plugin. An attacker who can authenticate and has basic read/search rights can craft a malicious cursor payload and send it to the /plugins/sql endpoint, causing the server to deserialize untrusted data and execute arbitrary code. This weakness directly maps to CWE‑502 and yields remote code execution, threatening confidentiality, integrity, and availability of the entire cluster.

OpenSearch SQL plugin is used by both Amazon OpenSearch Service and the open‑source OpenSearch distribution. The CVE does not specify affected versions, so any deployed installation that includes the vulnerable plugin component may be at risk until patched. Users should verify their OpenSearch version against the fix referenced in the 2.19.6 and 3.7.0 release notes.

The vulnerability scores a CVSS of 8.7, indicating high severity, and it is not listed in the CISA KEV catalog. Although an EPSS score is not available, the exploit requires remote authenticated access with ordinary read/search permissions, which are commonly granted. Once the attacker sends the crafted cursor, code execution can occur on the server, making this a serious risk for any exposed cluster.