org.open-metadata:openmetadata-dist (>=0.12.1, <=1.11.3), org.open-metadata:openmetadata-mcp (>=1.9.0, <=1.11.3) +1 more potentially affected by CVE-2026-22244 via org.open-metadata:openmetadata-service (>=0.12.1, <=1.11.3)

org.open-metadata:openmetadata-service MAVEN version =0.12.1, =0.12.1, =1.9.0, =1.11.3 - org.open-metadata:openmetadata-ui 0.12.1.preview Source cves: CVE-2026-22244 Source advisory: MEND:CVE-2026-22244...

CVE-2026-22244

OpenMetadata is affected by CVE-2026-22244 due to Server-Side Template Injection (SSTI) in FreeMarker email templates. Affected versions: prior to 1.11.4; exploitation requires administrative privileges and can lead to remote code execution. OpenMetadata 1.11.4 contains a patch. References and Re...

CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...

OpenMetadata security vulnerabilities

OpenMetadata is OpenMetadata open source a unified discovery, observability and governance platform powered by a central metadata repository, deep along and seamless team collaboration. A security vulnerability exists in OpenMetadata versions prior to 1.11.4 that stems from a server-side template...

CVE-2026-22244: Improper Neutralization of Special Elements Used in a Template Engine

OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...

GHSA-5F29-2333-H9C7 OpenMetadata's Server-Side Template Injection (SSTI) in FreeMarker email templates leads to RCE

OpenMetadata RCE Vulnerability - Proof of Concept Executive Summary CRITICAL Remote Code Execution vulnerability confirmed in OpenMetadata v1.11.2 via Server-Side Template Injection SSTI in FreeMarker email templates. Credit - @lnlinh31, @satthusaosan, @TheMacCuoi, @get-wright, @Ohnooo1234,...

EUVD-2026-1180

OpenMetadata's Server-Side Template Injection SSTI in FreeMarker email templates leads to RCE...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.11.3), org.open-metadata:openmetadata-mcp (>=1.9.0, <=1.11.3) potentially affected by unknown CVE via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.11.3)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.9.0, =1.11.3 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENMETADATA-14912636...

OpenMetadata's Server-Side Template Injection (SSTI) in FreeMarker email templates leads to RCE

OpenMetadata RCE Vulnerability - Proof of Concept Executive Summary CRITICAL Remote Code Execution vulnerability confirmed in OpenMetadata v1.11.2 via Server-Side Template Injection SSTI in FreeMarker email templates. Credit - @lnlinh31, @satthusaosan, @TheMacCuoi, @get-wright, @Ohnooo1234,...

PT-2026-2180

Name of the Vulnerable Software and Affected Versions OpenMetadata versions prior to 1.11.4 Description OpenMetadata is a unified metadata platform susceptible to remote code execution through Server-Side Template Injection SSTI within FreeMarker email templates. Exploitation requires an attacker...

SQL Injection

org.open-metadata, openmetadata-service is vulnerable to SQL injection. The vulnerability is due to improper input sanitization in the listCount function of the TestDefinitionDAO interface, where the testPlatform parameter is directly used to construct a SQL query, allowing attackers to inject...

SQL Injection

org.open-metadata, openmetadata-service is vulnerable to SQL Injection. The vulnerability is due to improper handling of the entityType parameter in TestDefinitionDAO.listCount due to concatenating untrusted input into an SQL query, allowing attackers to supply crafted entityType values that modi...

SQL Injection

org.open-metadata, openmetadata-service is vulnerable to SQL Injection. The vulnerability is due to improper handling of the supportedDataTypeParam parameter in TestDefinitionDAO.listCount due to concatenating untrusted input into an SQL query, allowing attackers to supply crafted...

SQL Injection

org.open-metadata, openmetadata-service is vulnerable to SQL Injection. The vulnerability is due to improper handling of the entityType parameter in DocStoreDAO.listCount allowing attackers to supply crafted entityType values that modify the query and extract arbitrary data from the database...

EUVD-2024-54430

Malicious code in bioql PyPI...

EUVD-2025-24002

Malicious code in bioql PyPI...

EUVD-2025-24005

Malicious code in bioql PyPI...

EUVD-2025-24004

Malicious code in bioql PyPI...

EUVD-2025-24003

Malicious code in bioql PyPI...

CVE-2025-50468

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO interface. The entityType parameters can be used to build a SQL query...