open-metadata OpenMetadata

2 known vulnerabilities in open-metadata OpenMetadata, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-100373 CVSS 5.1 medium OpenMetadata through 2.0.2 contains a server-side request forgery vulnerability in the URLValidator.validateURL function that fails to…
  • CVE-2026-81029 CVSS 8.5 high OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the…