SecAlerts
CVE ListPricingSign Up
o

open-metadata

Security Risk Profile

50
/100
medium

Security Risk Score

Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 15, 2024 to present

12
Total CVEs
10
Critical+High
0
Exploited
5
Unpatched

Threat Assessment

Avg CVSS
8.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
50/100
medium

Severity Distribution

Critical
3
High
7
Medium
2
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
7

Age Distribution

Common Weaknesses (CWE)

1
SQL Injection
5
2
Code Injection
4
3
Input Validation
1
4
OS Command Injection
1

Most Affected Products

1. open-metadata OpenMetadata12
2. OpenMetadata OpenMetadata7
3. maven/org.open-metadata:openmetadata-service4
4. maven/org.open-metadata:openmetadata-sdk1
5. OpenMetadata1

Recent Vulnerabilities

See more →
CVE-2026-26010
CVSS 7.6EPSS 0%high

Leaky JWTs in OpenMetadata exposing highly-privileged bot users

Feb 11, 2026
CVE-2026-22244
CVSS 9.1EPSS 0%critical

OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE

Jan 7, 2026
CVE-2025-50468
CVSS 6.5medium
Aug 8, 2025🔧 No Patch
CVE-2025-50467
CVSS 6.5medium
Aug 8, 2025🔧 No Patch
CVE-2025-50465
CVSS 8.8high
Aug 8, 2025🔧 No Patch
CVE-2025-50466
CVSS 7.1high
Aug 8, 2025🔧 No Patch
CVE-2024-55238
CVSS 8.8high
Apr 17, 2025🔧 No Patch
CVE-2024-28848
CVSS 8.8EPSS 0%high

GHSL-2023-235_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 15, 2024
CVE-2024-28255
CVSS 9.8EPSS 0%critical

GHSL-2023-235_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 15, 2024🔧 No Patch
CVE-2024-28847
CVSS 8.8EPSS 0%high

GHSL-2023-235_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 15, 2024

Monitor open-metadata in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.