CVE-2025-9624
High · 7.7OpenSearch is vulnerable to DoS via complex query_string inputs
CVSS
7.7
EPSS
0.7%
Published
Nov 25, 2025
CISA due date
—
The record
A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions below 3.2.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.opensearch:opensearch-common | 0 | 2.19.4 |
| Maven | org.opensearch:opensearch-common | 3.0.0 | 3.3.0 |
| Chainguard | opensearch-2 | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-alerting | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-icu | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-kuromoji | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-nori | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-phonetic | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-smartcn | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-stempel | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-analysis-ukrainian | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-anomaly-detection | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-asynchronous-search | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-cross-cluster-replication | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-crypto-kms | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-custom-codecs | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-discovery-azure-classic | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-discovery-ec2 | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-discovery-gce | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-entrypoint-compat | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-geospatial | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-identity-shiro | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-index-management | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-ingest-attachment | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-job-scheduler | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-k-nn | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-mapper-annotated-text | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-mapper-murmur3 | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-mapper-size | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-ml-commons | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-neural-search | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-notifications | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-observability | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-performance-analyzer | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-reporting | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-repository-azure | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-repository-gcs | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-repository-s3 | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-security | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-security-analytics | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-sql | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-store-smb | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-telemetry-otel | 0 | 2.19.4-r0 |
| Chainguard | opensearch-2-transport-nio | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2 | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-alerting | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-icu | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-kuromoji | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-nori | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-phonetic | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-smartcn | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-stempel | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-analysis-ukrainian | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-anomaly-detection | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-asynchronous-search | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-cross-cluster-replication | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-crypto-kms | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-custom-codecs | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-discovery-azure-classic | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-discovery-ec2 | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-discovery-gce | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-geospatial | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-identity-shiro | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-index-management | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-ingest-attachment | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-job-scheduler | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-k-nn | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-mapper-annotated-text | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-mapper-murmur3 | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-mapper-size | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-ml-commons | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-neural-search | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-notifications | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-observability | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-performance-analyzer | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-reporting | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-repository-azure | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-repository-gcs | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-repository-s3 | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-security | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-security-analytics | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-sql | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-store-smb | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-telemetry-otel | 0 | 2.19.4-r0 |
| Wolfi | opensearch-2-transport-nio | 0 | 2.19.4-r0 |
| maven | org.opensearch/opensearch-common | 3.0.0 | 3.3.0 |
Related vulnerabilities
- CVE-2025-68161 Apache Log4j does not verify the TLS hostname in its Socket Appender Also affects opensearch-2
- CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder Also affects opensearch-2
- CVE-2025-58056 Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions Also affects opensearch-2
- CVE-2025-54988 Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and… Also affects opensearch-2
- CVE-2025-8916 Allocation of Resources Without Limits or Throttling vulnerability in Legion of the… Also affects opensearch-2
- CVE-2025-55163 Netty affected by MadeYouReset HTTP/2 DDoS vulnerability Also affects opensearch-2
- CVE-2025-8885 Allocation of Resources Without Limits or Throttling vulnerability in Legion of the… Also affects opensearch-2
- CVE-2025-22227 In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks… Also affects opensearch-2