TI-2026-21024 Aliases CVE-2026-26010 GHSA-pqqf-7hxm-rj5r

Leaky JWTs in OpenMetadata exposing highly-privileged bot users

HIGH 66CWE-269Published 2026-02-11 · Updated 2026-02-12

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation
Confidentiality · integrity · availability: Low · High · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-269.

Summary

OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00368 30th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed OpenMetadata (open-metadata): 1.11.8org.open-metadata:openmetadata-sdk (Maven): 1.11.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
open-metadata	OpenMetadata	before 1.11.8	1.11.8	Patch available	CNA
—	org.open-metadata:openmetadata-sdk (Maven)	before 1.11.8	1.11.8	Patch available	GHSA-pqqf-7hxm-rj5r

OpenMetadata Vendoropen-metadata Affected before 1.11.8 Fixed in 1.11.8 Patch available CNA
org.open-metadata:openmetadata-sdk (Maven) Vendor— Affected before 1.11.8 Fixed in 1.11.8 Patch available GHSA-pqqf-7hxm-rj5r

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:open-metadata:openmetadata::::::::	before 1.11.8	Vulnerable	open-metadata

cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:* Versions before 1.11.8 Vulnerable ·open-metadata

Remediation

Fix · CNA OpenMetadata (open-metadata) Fixed in 1.11.8
Fix · GHSA-pqqf-7hxm-rj5r org.open-metadata:openmetadata-sdk (Maven) Fixed in 1.11.8 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-26010
2026-10-03 Alias added: GHSA-pqqf-7hxm-rj5r

References

Exploit 1

https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-26010

Other 2

TI-2024-18814 Authentication Bypass in OpenMetadata CVSS 3.1CRITICAL 9.8
TI-2024-19050 SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata CVSS 3.1HIGH 8.8
TI-2024-19049 SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata CVSS 3.1HIGH 8.8
TI-2024-18813 SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata CVSS 3.1HIGH 8.8
TI-2026-17854 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE CVSS 4.0HIGH 8.5
TI-2024-36809 OpenMetadata <=1.4.1 is vulnerable to SQL Injection. CVSS 3.1HIGH 8.8

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences