Sploitus

13 exploited vulnerabilities in Openmetadata

Vulnerabilities with publicly known exploits

Vendors
Unknown, Open Metadata, Git, Maven, Amazon, Postgresql
With known exploits
13
Affected Open-metadata Openmetadata versions
< 1.2.4

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2024-28255 4 exploits
CVSS 10.0 CRITICAL 2024-03-15FIX AVAILABLE
OpenMetadata 1.2.3 Authentication Bypass / SpEL Injection ExploitOpenMetadata 1.2.3 Authentication Bypass / SpEL Injection
CVE-2024-28253
CVSS 9.7 CRITICAL 2024-03-15FIX AVAILABLE
CVE-2026-22244
CVSS 9.4 CRITICAL 2026-01-07FIX AVAILABLE
CVE-2024-28254 3 exploits
CVSS 9.0 HIGH 2024-03-07FIX AVAILABLE
OpenMetadata 1.2.3 Authentication Bypass / SpEL Injection ExploitOpenMetadata 1.2.3 Authentication Bypass / SpEL Injection
CVE-2024-28847
CVSS 9.0 HIGH 2024-03-11FIX AVAILABLE
CVE-2024-28848
CVSS 9.0 HIGH 2024-03-11FIX AVAILABLE
CVE-2025-50465
CVSS 8.8 HIGH 2025-08-08FIX AVAILABLE
CVE-2024-55238
CVSS 8.8 HIGH 2025-04-17
CVE-2026-46481
CVSS 8.3 HIGH 2026-05-21FIX AVAILABLE
CVE-2026-26010
CVSS 7.6 HIGH 2026-02-11FIX AVAILABLE
CVE-2025-50466
CVSS 7.1 HIGH 2025-08-08FIX AVAILABLE
CVE-2025-50468
CVSS 6.5 MEDIUM 2025-08-08FIX AVAILABLE
CVE-2025-50467
CVSS 6.5 MEDIUM 2025-08-08FIX AVAILABLE