Skip to content
OpenAdvisories

Package · Maven

org.open-metadata:openmetadata-sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.6
    CVE-2026-26010

    Leaky JWTs in OpenMetadata exposing highly-privileged bot users

    OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privilege…

    open-metadata OpenMetadata org.open-metadata:openmetadata-sdk Maven