High severity8.7NVD Advisory· Published Aug 21, 2026

CVE-2026-77811

Description

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Opensearch Project/Observabilityllm-fuzzy

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/2026-088-aws/nvd
github.com/opensearch-project/dashboards-observability/security/advisories/GHSA-rmqx-r3wm-3px5nvd
opensearch.org/artifacts/by-version/nvd
opensearch.org/artifacts/by-version/nvd

News mentions

No linked articles in our index yet.

cvss	0.565
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000