Read the docs
TI-2026-56039 Aliases CVE-2026-81029GHSA-j399-mfvr-j893

OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

Priority HIGH 72CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-601.

Summary

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request parameter and stores it in the HTTP session without comparing it against any configured or registered destination, and the assertion consumer servlet later formats that stored value into a URL carrying the freshly issued JWT together with the account's email and name before sending the redirect. The OIDC and OAuth2 handler follows the same pattern with its own redirect parameter and the issued identity token. A request naming a destination the attacker controls therefore causes the server to deliver a valid token for whoever completes the login to that destination. Because the token authenticates API calls as that account, a user who follows such a link and authenticates hands over control of their account. Version 2.0.0 removes the caller-supplied callback parameter; no 1.x release validates it.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00553 46th percentileScored 2026-11-07
Fix Fixed OpenMetadata (open-metadata): 2.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
open-metadataOpenMetadatabefore 2.0.02.0.0Patch availableCNA
  • OpenMetadata Vendoropen-metadata Affected before 2.0.0 Fixed in 2.0.0 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:*——open-metadata
  • cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:* Versions — — ·open-metadata

Remediation

  • Fix · CNA OpenMetadata (open-metadata) Fixed in 2.0.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-81029
  2. 2026-10-03 Alias added: GHSA-j399-mfvr-j893
  3. 2026-10-20 1 new reference · CNA

References

Advisory 1

Other 3

  • TI-2024-18814 Authentication Bypass in OpenMetadata CVSS 3.1CRITICAL 9.8
  • TI-2024-19050 SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` in OpenMetadata CVSS 3.1HIGH 8.8
  • TI-2024-19049 SpEL Injection in `PUT /api/v1/events/subscriptions` in OpenMetadata CVSS 3.1HIGH 8.8
  • TI-2024-18813 SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata CVSS 3.1HIGH 8.8
  • TI-2026-17854 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE CVSS 4.0HIGH 8.5
  • TI-2026-34181 OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users CVSS 3.1HIGH 8.3
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences