org.open-metadata:openmetadata-dist (>=1.12.1, <=1.12.3), org.open-metadata:openmetadata-k8s-operator (>=1.12.1, <=1.12.3) +1 more potentially affected by CVE-2026-46481 via org.open-metadata:openmetadata-service (>=1.12.1, <=1.12.3)

org.open-metadata:openmetadata-service MAVEN version =1.12.1, =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: CVE-2026-46481 Source advisory: SNYK:JAVA-ORGOPENMETADATA-16874299...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.12.3), org.open-metadata:openmetadata-k8s-operator (>=1.12.0-rc1, <=1.12.3) +1 more potentially affected by CVE-2026-46481 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.12.3)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.12.0-rc1, =1.9.0, =1.12.3 Source cves: CVE-2026-46481 Source advisory: GHSA-9VMH-WHC4-7PHG...

org.open-metadata:openmetadata-dist (0.12.1.preview), org.open-metadata:openmetadata-ui (0.12.1.preview) potentially affected by CVE-2026-46481 via org.open-metadata:openmetadata-service (0.12.1.preview)

org.open-metadata:openmetadata-service MAVEN version 0.12.1.preview is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.1.preview -...

CVE-2026-46481

creationtimestamp| type| source ---|---|--- 2026-05-14 15:37:25+00:00| published-proof-of-concept| https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-9vmh-whc4-7phg 2026-06-08 19:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnshblm7jb2r...

CVE-2026-26010

OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services Glue / Redshift / Postgres. Any read-only user can gain access to a highly privileged account, typically which has the...

CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...

org.open-metadata:openmetadata-dist (>=0.12.1, <=1.11.3), org.open-metadata:openmetadata-mcp (>=1.9.0, <=1.11.3) +1 more potentially affected by CVE-2026-22244 via org.open-metadata:openmetadata-service (>=0.12.1, <=1.11.3)

org.open-metadata:openmetadata-service MAVEN version =0.12.1, =0.12.1, =1.9.0, =1.11.3 - org.open-metadata:openmetadata-ui 0.12.1.preview Source cves: CVE-2026-22244 Source advisory: MEND:CVE-2026-22244...

Improper Neutralization of Special Elements Used in a Template Engine

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the getTemplate function. An attacker can execute arbitrary code on the server by injecting malicious FreeMarker templates through the email template editing API...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.11.3), org.open-metadata:openmetadata-mcp (>=1.9.0, <=1.11.3) potentially affected by unknown CVE via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.11.3)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.9.0, =1.11.3 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENMETADATA-14912636...

CVE-2025-50465

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the listCount function in the TestDefinitionDAO interface when the supportedDataTypeParam parameter is used to construct a SQL query. An attacker can extract sensitive information from the database by injecting crafted...

CVE-2025-50468

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO interface. The entityType parameters can be used to build a SQL query...

CVE-2025-50466

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The entityType parameter can be used to build a SQL query...

CVE-2025-50465

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query...

CVE-2025-50466

OpenMetadata =1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The entityType parameter can be used to build a SQL query...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the listCount function in the WorkflowDAO interface. An attacker can extract sensitive information from the database by manipulating the workflowtype and status parameters to construct malicious SQL queries. Remediatio...

org.open-metadata:openmetadata-dist (>=1.0.0-alpha, <=1.4.1) potentially affected by CVE-2024-55238 via org.open-metadata:openmetadata-service (>=1.0.0-alpha, <=1.4.1)

org.open-metadata:openmetadata-service MAVEN version =1.0.0-alpha, =1.0.0-alpha, =1.4.1 Source cves: CVE-2024-55238 Source advisory: GHSA-X8PM-WRG2-MQMX...

org.open-metadata:openmetadata-dist (0.12.1.preview), org.open-metadata:openmetadata-ui (0.12.1.preview) potentially affected by CVE-2024-28848 via org.open-metadata:openmetadata-service (0.12.1.preview)

org.open-metadata:openmetadata-service MAVEN version 0.12.1.preview is affected by a known vulnerability. The following packages have a transitive dependency on org.open-metadata:openmetadata-service and may be impacted: - org.open-metadata:openmetadata-dist 0.12.1.preview -...

GHSA-8P5R-6MVV-2435 OpenMetadata vulnerable to a SpEL Injection in `PUT /api/v1/events/subscriptions` (`GHSL-2023-251`)

SpEL Injection in PUT /api/v1/events/subscriptions GHSL-2023-251 Please note, only authenticated users have access to PUT / POST APIS for /api/v1/policies. Non authenticated users will not be able to access these APIs to exploit the vulnerability. A user must exist in OpenMetadata and have...

GHSA-7VF4-X5M2-R6GR OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)

SpEL Injection in PUT /api/v1/policies GHSL-2023-252 Please note, only authenticated users have access to PUT / POST APIS for /api/v1/policies. Non authenticated users will not be able to access these APIs to exploit the vulnerability CompiledRule::validateExpression is also called from...