CVE-2025-9624

Publication date 25 November 2025

Last updated 26 November 2025


Ubuntu priority

Description

A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs. This issue affects all OpenSearch versions below 3.2.0.

Status

Package Ubuntu Release Status
opensearch 25.10 questing Not in release
25.04 plucky Not in release
24.04 LTS noble
Needs evaluation
22.04 LTS jammy Not in release