PatchTheCVE: open-metadata

CVE-2026-26010: OpenMetadata is a unified metadata platform

Wed, 17 Jun 2026 10:25:35 +0000

HIGH 7.6: OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingest

CVE-2026-22244: OpenMetadata is a unified metadata platform

Mon, 31 Aug 2026 23:16:35 +0000

HIGH 7.2: OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.

CVE-2025-50468: OpenMetadata <=1.4.4 is vulnerable to SQL Injection

Wed, 17 Jun 2026 09:35:05 +0000

MEDIUM 6.5: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO interface. The entityType parameters can be used to build a SQL query.

CVE-2025-50467: OpenMetadata <=1.4.4 is vulnerable to SQL Injection

Wed, 17 Jun 2026 09:35:05 +0000

MEDIUM 6.5: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query.

CVE-2025-50466: OpenMetadata <=1.4.4 is vulnerable to SQL Injection

Wed, 17 Jun 2026 09:35:05 +0000

HIGH 7.1: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The entityType parameter can be used to build a SQL query.

CVE-2025-50465: OpenMetadata <=1.4.4 is vulnerable to SQL Injection

Wed, 17 Jun 2026 09:35:05 +0000

HIGH 7.1: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query.

CVE-2024-55238: OpenMetadata <=1.4.1 is vulnerable to SQL Injection

Wed, 17 Jun 2026 08:11:03 +0000

HIGH 7.1: OpenMetadata <=1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query.

CVE-2024-28848: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata

Wed, 17 Jun 2026 07:21:53 +0000

HIGH 8.8: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `‎CompiledRule::validateExpression` method evaluates an SpEL expression using an `StandardEvaluationContext`, allowing the

CVE-2024-28847: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata

Wed, 17 Jun 2026 07:21:52 +0000

HIGH 8.8: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. Similarly to the GHSL-2023-250 issue, `AlertUtil::validateExpression` is also called from `EventSubscriptionRepository.prepare(

CVE-2024-28255: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata

Wed, 17 Jun 2026 07:21:16 +0000

CRITICAL 9.8: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `JwtFilter` handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request'

CVE-2024-28254: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata

Wed, 17 Jun 2026 07:21:16 +0000

HIGH 8.8: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The `‎AlertUtil::validateExpression` method evaluates an SpEL expression using `getValue` which by default uses the `StandardEv

CVE-2024-28253: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata

Wed, 17 Jun 2026 07:21:16 +0000

CRITICAL 9.4: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. `CompiledRule::validateExpression` is also called from `PolicyRepository.prepare`. `prepare()` is called from `EntityRepository