https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:52:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-268267 EUVD-2026-268267 https://cve.radiocsirt.org/vuln/euvd-2026-268267 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26010 <p>OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8.</p> <p>OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-26010 https://cve.radiocsirt.org/vuln/ghsa-pqqf-7hxm-rj5r <p><strong>Affected:</strong> Maven: org.open-metadata:openmetadata-sdk</p> <p>### Summary Calls issued by the UI against `/api/v1/ingestionPipelines` leak JWTs used by `ingestion-bot` for certain services (Glue / Redshift / Postgres)</p> <p>### Details Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies).</p> <p>### PoC I was able to extract the JWT used by the bot/agent populating [sample_athena.default](https://sandbox.open-metadata.org/database/sample_athena.default) in the Collate Sandbox. To prove this out, I mutated the description to this UUID: `fe2e4cc1-da72-4acf-8535-112a3cfa9c7e,` which you can see @ https://sandbox.open-metadata.org/database/sample_athena.default.</p> <p>#### Steps to Reproduce</p> <p>* Create a Collate Sandbox account; these are non-admin accounts by default with minimal permissions. * Open the Developer Console * Go to the Services Page. In this case, [sample_athena](https://sandbox.open-metadata.org/service/databaseServices/sample_athena?showDeletedTables=false&amp;currentPage=1), though other services * In the Network tab, introspect the request made to api/v1/services/ingestionPipelines, and find the jwtToken in the response: &lt;img width=&#34;1329&#34; height=&#34;299&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/0c405776-159e-4188-9591-ed8cc71bc596&#34; /&gt;</p> <p>* Use the JWT to issue (potentially destructive) API calls &lt;…</p> <p><strong>Affected:</strong> Maven: org.open-metadata:openmetadata-sdk</p> <p>### Summary Calls issued by the UI against `/api/v1/ingestionPipelines` leak JWTs used by `ingestion-bot` for certain services (Glue / Redshift / Postgres)</p> <p>### Details Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies).</p> <p>### PoC I was able to extract the JWT used by the bot/agent populating [sample_athena.default](https://sandbox.open-metadata.org/database/sample_athena.default) in the Collate Sandbox. To prove this out, I mutated the description to this UUID: `fe2e4cc1-da72-4acf-8535-112a3cfa9c7e,` which you can see @ https://sandbox.open-metadata.org/database/sample_athena.default.</p> <p>#### Steps to Reproduce</p> <p>* Create a Collate Sandbox account; these are non-admin accounts by default with minimal permissions. * Open the Developer Console * Go to the Services Page. In this case, [sample_athena](https://sandbox.open-metadata.org/service/databaseServices/sample_athena?showDeletedTables=false&amp;currentPage=1), though other services * In the Network tab, introspect the request made to api/v1/services/ingestionPipelines, and find the jwtToken in the response: &lt;img width=&#34;1329&#34; height=&#34;299&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/0c405776-159e-4188-9591-ed8cc71bc596&#34; /&gt;</p> <p>* Use the JWT to issue (potentially destructive) API calls &lt;…</p> https://cve.radiocsirt.org/vuln/ghsa-pqqf-7hxm-rj5r