# CVE-2025-9624 Doubts

**URL:** <https://forum.opensearch.org/t/cve-2025-9624-doubts/27578>\
**Category:** Security\
**Tags:** cve\
**Created:** [December 3, 2025, 10:05am UTC](https://forum.opensearch.org/t/cve-2025-9624-doubts/27578 "2025-12-03T10:05:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shadowfax](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@shadowfax](https://forum.opensearch.org/u/shadowfax)\
**Post date:** [December 3, 2025, 10:05am UTC](https://forum.opensearch.org/t/cve-2025-9624-doubts/27578/1 "2025-12-03T10:05:47Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

Opensearch: 2.19.3

**Describe the issue** : We are facing CV CVE-2025-9624 and we are using Graylog with Opensearch: 2.19.3. What should be done to resolve the issue

**Configuration** : OS Information: Debian Trixie

Regards,

shadowfax

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [December 4, 2025, 9:44am UTC](https://forum.opensearch.org/t/cve-2025-9624-doubts/27578/2 "2025-12-04T09:44:04Z")

</div>

@shadowfax This CVE has been already reported in OpenSearch GitHub.

> <https://github.com/opensearch-project/OpenSearch/issues/20130>
>
> \### Describe the bug
> 
> Currently, CVE-2025-9624 is only resolved in version 3.2.0…. However, upgrading to version 3.2.x necessitates updating the JDK from 17 to 21, which would significantly impact projects. Version 2.19.x seems to be a long-term support version; are you considering addressing this issue?
> 
> \### Related component
> 
> Other
> 
> \### To Reproduce
> 
> 1. Go to '...'
> 2. Click on '....'
> 3. Scroll down to '....'
> 4. See error
> 
> 
> \### Expected behavior
> 
> Hopefully, version 2.19.x will fix this CVE: CVE-2025-9624.
> 
> \### Additional Details
> 
> \*\*Plugins\*\*
> Please list all plugins currently enabled.
> 
> \*\*Screenshots\*\*
> If applicable, add screenshots to help explain your problem.
> 
> \*\*Host/Environment (please complete the following information):\*\*
> - OS: \[e.g. iOS\]
> - Version \[e.g. 22\]
> 
> \*\*Additional context\*\*
> Add any other context about the problem here.