Skip to content
OpenAdvisories

Vendor

openmeter

2 known vulnerabilities.

Products

openmeter 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-18801

    Stored Clickhouse SQL Injection Through Customer Usage Attribution

    OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or usageAttribution.subject…

    openmeter openmeter