Open-metadata

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 14
    Known Exploited: 0
    2
    Critical Level Threats
    10
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-81029

    OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

    Last Modified: Aug 26, 2026
    Published: Aug 26, 2026

    CVE-2026-46481

    OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users

    Last Modified: Jun 08, 2026
    Published: Jun 08, 2026

    CVE-2026-26010

    Leaky JWTs in OpenMetadata exposing highly-privileged bot users

    Last Modified: Apr 17, 2026
    Published: Feb 11, 2026

    CVE-2026-22244

    OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

    Last Modified: Aug 31, 2026
    Published: Jan 08, 2026

    CVE-2025-50465

    OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query.

    Last Modified: Aug 12, 2025
    Published: Aug 08, 2025
    Items Per Page
    Open-Metadata Vulnerabilities & Security CVEs | CVE-DB