What is the CVSS score of CVE-2026-22244?

CVE-2026-22244 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of Openmetadata are affected by CVE-2026-22244?

Organizations using OpenMetadata face moderate risk from CVE-2026-22244 rated CVSS 7.2. Exploitation could compromise the security of affected deployments.. A patch is available.

Is there a public PoC exploit available for CVE-2026-22244?

Yes, a public proof-of-concept exploit is available for CVE-2026-22244. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate CVE-2026-22244?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Vendor patch is available.

Openmetadata CVE-2026-22244

HIGH

Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

2026-01-08 security-advisories@github.com

GHSA-5f29-2333-h9c7

RCE Openmetadata

7.2

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 15, 2026 - 21:14 vuln.today

Public exploit code

Patch released

Jan 15, 2026 - 21:14 nvd

Patch available

CVE Published

Jan 08, 2026 - 16:16 nvd

HIGH 7.2

DescriptionGitHub Advisory

OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.

AnalysisAI

Remote code execution in OpenMetadata versions before 1.11.4 through Server-Side Template Injection in FreeMarker email templates allows authenticated administrators to execute arbitrary code on the affected system. Public exploit code exists for this vulnerability, and attackers with admin-level access can leverage unsafe template processing to compromise the metadata platform. A patch is available in version 1.11.4 and should be applied immediately.

Technical ContextAI

Affects Openmetadata. OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.