CVE-2026-75897

No fix known EPSS <1%CVSS 7.5

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.