Vulnerability

CVE-2025-9624

 Report advisory or correction

CVSS Score 7.5 high

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-674

References

https://fluidattacks.com/advisories/chick
https://github.com/advisories/GHSA-mw3v-mmfw-3x2g
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-9624

[CVE-2025-9624] CWE-674: Uncontrolled Recursion

Description

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.

See org.opensearch/opensearch-common package information