SecAlerts
CVE ListPricingSign Up
O

OpenMetadata

Security Risk Profile

62
/100
high

Security Risk Score

Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 15, 2024 to present

13
Total CVEs
6
Critical+High
0
Exploited
6
Unpatched

Threat Assessment

Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
62/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
1
High
5
Medium
2
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
SQL Injection
5
2
OS Command Injection
1

Most Affected Products

1. OpenMetadata OpenMetadata13
2. open-metadata OpenMetadata7
3. maven/org.open-metadata:openmetadata-service1

Recent Vulnerabilities

See more →
CVE-2026-81029
CVSS 8.5high

OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

Aug 26, 2026🔧 No Patch
CVE-2025-50468
CVSS 6.5medium
Aug 8, 2025🔧 No Patch
CVE-2025-50467
CVSS 6.5medium
Aug 8, 2025🔧 No Patch
CVE-2025-50465
CVSS 8.8high
Aug 8, 2025🔧 No Patch
CVE-2025-50466
CVSS 7.1high
Aug 8, 2025🔧 No Patch
CVE-2024-55238
CVSS 8.8high
Apr 17, 2025🔧 No Patch
GHSL-2023-251
unknown

GHSL-2023-235_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 20, 2024🔧 No Patch
CVE-2024-28845
unknown

GHSL-2023-235_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 20, 2024🔧 No Patch
GHSL-2023-235
unknown

_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 20, 2024🔧 No Patch
GHSL-2023-237
unknown

GHSL-2023-235_GHSL-2023-237,GHSL-2023-251_GHSL-2023-252: Pre-authentication RCE in OpenMetadata - CVE-2024-28253, CVE-2024-28254, CVE-2024-28255, CVE-2024-28845, CVE-2024-28848

Mar 20, 2024🔧 No Patch

Monitor OpenMetadata in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.