Missing Auth in OpenSearch Execute Monitor API Enables Data Manipulation
CVE-2026-19311 Published on August 12, 2026

Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-19311 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE

Weakness Type

Undefined Behavior for Input to API

The behavior of this function is undefined unless its control parameter is set to a specific value.


Products Associated with CVE-2026-19311

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-19311 are published in these products:

Aws Opensearch
 
github Opensearch
 
Amazon Aws
 

Affected Versions

AWS OpenSearch: Github OpenSearch: