OpenSearch SQL Plugin Vulnerability Lets Users Bypass Security Rules
OpenSearch SQL Plugin versions 2.13–3.6 have a nasty security gap: the Flint extension doesn't properly validate async queries, letting users slip past the SQL grammar deny list through direct queries. If you're running affected versions, you need to update to 3.7 or 2.19.6 ASAP. AWS managed OpenSearch users get automatic fixes via service updates.
source: [aws/security-bulletin]