AWS has fixed a high-severity OpenSearch SQL Plugin flaw that turns a low-privilege search account into a route to arbitrary code execution on the server. The dangerous part is the permission boundary: the account only needs basic read and search…