TI-2026-34181 Aliases CVE-2026-46481 GHSA-9vmh-whc4-7phg

OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users

HIGH 71CWE-201Published 2026-06-08 · Updated 2026-06-08

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-201.

Summary

OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, in the HTTP 201 response of POST /api/v1/automations/workflows, both the cleartext database password in request.connection.config.password and the ingestion bot JWT in openMetadataServerConnection.securityConfig.jwtToken. The leaked ingestion-bot token can then be reused as Authorization: Bearer <jwt> to access sensitive service APIs with bot-level privileges. This issue has been patched in version 1.12.4.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00241 15th percentileScored 2026-11-07

Fix Fixed OpenMetadata (open-metadata): 1.12.4org.open-metadata:openmetadata-service (Maven): 1.12.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
open-metadata	OpenMetadata	before 1.12.4	1.12.4	Patch available	CNA
—	org.open-metadata:openmetadata-service (Maven)	before 1.12.4	1.12.4	Patch available	GHSA-9vmh-whc4-7phg

OpenMetadata Vendoropen-metadata Affected before 1.12.4 Fixed in 1.12.4 Patch available CNA
org.open-metadata:openmetadata-service (Maven) Vendor— Affected before 1.12.4 Fixed in 1.12.4 Patch available GHSA-9vmh-whc4-7phg

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:open-metadata:openmetadata::::::::	—	—	open-metadata

cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:* Versions — — ·open-metadata

Remediation

Fix · CNA OpenMetadata (open-metadata) Fixed in 1.12.4
Fix · GHSA-9vmh-whc4-7phg org.open-metadata:openmetadata-service (Maven) Fixed in 1.12.4 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-46481
2026-10-03 Alias added: GHSA-9vmh-whc4-7phg

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-46481

Other 2

TI-2024-18814 Authentication Bypass in OpenMetadata CVSS 3.1CRITICAL 9.8
TI-2024-19050 SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata CVSS 3.1HIGH 8.8
TI-2024-19049 SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata CVSS 3.1HIGH 8.8
TI-2024-18813 SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata CVSS 3.1HIGH 8.8
TI-2026-56039 OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI CVSS 4.0HIGH 8.5
TI-2026-17854 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE CVSS 4.0HIGH 8.5

See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences