CVE-2026-77811

highCVSS 8.7covered by 2 sourcesfirst seen 2026-08-21

Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset with arbitrary web content.

CSIRTS triage

What: Stored cross-site scripting in the dashboards-observability plugin's integrations static file endpoint due to improper input validation.
Who is affected: Authenticated users with write permissions to OpenSearch Dashboards saved objects can inject malicious scripts affecting other users.
Urgency: Important — requires authenticated attacker with write access; can perform actions with victim's privileges.
Action: Upgrade OpenSearch Dashboards to patched version when available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-77811

Get an email if CVE-2026-77811 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.

Advisory coverage (2)

highCVE-2026-77811: Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allo…nvd · 2026-08-21
unknownCVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboardsaws · 2026-08-21

External references

NVD record for CVE-2026-77811

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-77811 status](https://www.csirts.com/badge/CVE-2026-77811)](https://www.csirts.com/cve/CVE-2026-77811)