CVE-2026-64686 — SSRF vulnerability in OpenSearch Dashboards fetchDataSourceMetaData due to missing endpoint validation

CVE-2026-64686 is a server-side request forgery (SSRF) vulnerability in OpenSearch Dashboards’ fetchDataSourceMetaData function, caused by missing endpoint validation.