What is the CVSS score of CVE-2026-26010?

CVE-2026-26010 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2026-26010?

Yes, a public proof-of-concept exploit is available for CVE-2026-26010. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-26010?

Within 24 hours: Audit access logs for /api/v1/ingestionPipelines endpoints and identify exposed JWTs; immediately rotate all ingestion-bot service account credentials and API keys for connected Glue/Redshift/Postgres systems. Within 7 days: Deploy network segmentation or WAF rules to restrict /api/v1/ingestionPipelines access to authorized internal systems only; implement enhanced monitoring on data platform access using exposed credentials. Within 30 days: Upgrade OpenMetadata to version 1.11.8 or later once available; conduct full forensic review of data access logs during exposure window for signs of unauthorized activity.

Openmetadata CVE-2026-26010

HIGH

Improper Privilege Management (CWE-269)

2026-02-11 security-advisories@github.com

GHSA-pqqf-7hxm-rj5r

PostgreSQL Openmetadata Open Metadata

7.6

CVSS 3.1 · GitHub Advisory

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Authenticate as read-only user
Delivery

Call /api/v1/ingestionPipelines endpoint
Exploit

Extract leaked JWT tokens
Execution

Impersonate ingestion-bot account
Impact

Execute destructive metadata operations

Vulnerability Assessment

Weakness	CWE CWE-269 OWASP Top 10:2025 A06:2025 - Insecure Design ASVS 5.0 V8 - Authorization Least privilege enforcement MITRE ATT&CK 1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	OpenMetadata versions prior to 1.11.8 with ingestion pipelines configured for Glue, Redshift, or Postgres services. Attacker requires valid read-only user credentials to access the vulnerable /api/v1/ingestionPipelines API endpoint that leaks ingestion-bot JWTs.
Impact	CVSS 7.6 (HIGH). Attack vector: Network. Complexity: Low. Privileges required: Low. User interaction: None. Public exploit/POC available.
Exploit ScenarioDerived	An attacker could exploit this vulnerability to compromise the affected system.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

OpenMetadata versions prior to 1.11.8 expose JWT tokens for the privileged ingestion-bot account through the /api/v1/ingestionPipelines API endpoint, allowing any read-only user to escalate privileges and impersonate a highly privileged service account. With public exploit code available and no patch currently deployed on most instances, attackers can perform destructive actions within OpenMetadata and access sensitive metadata that should be restricted by role-based policies. This vulnerability affects OpenMetadata deployments and related systems like PostgreSQL that depend on its authentication tokens.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 22:02 CVSS 7.6

RemediationAI

Fixed in version 1.11.8.. Restrict network access to the affected service where possible.

Affected Packages

maven org.open-metadata:openmetadata-sdk fix: 1.11.8

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in maven

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Classified as CWE-269 (Improper Privilege Management). Affects Openmetadata. OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnera

Know when Openmetadata gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

GitHub Advisory PRIMARY 7.6 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Feb 13, 2026 - 21:34 vuln.today

Public exploit code

CVE Published

Feb 11, 2026 - 21:16 nvd

HIGH 7.6

DescriptionGitHub Advisory

OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8.

Executive ViewAI

Why It Matters

OpenMetadata instances prior to version 1.11.8 expose authentication credentials (JWTs) through the UI metadata ingestion API, allowing attackers to hijack service accounts with access to critical data platforms like AWS Glue, Redshift, and PostgreSQL databases. This vulnerability directly threatens data confidentiality and integrity across connected data infrastructure, particularly for organizations using OpenMetadata for metadata governance.

Business Impact: High

Compensating Controls

Restrict network access to /api/v1/ingestionPipelines endpoint via firewall/WAF to authorized internal IPs only; disable or isolate the ingestion-bot service account until patched; rotate all service credentials immediately for connected data platforms; enable audit logging and monitoring on Glue, Redshift, and PostgreSQL for unauthorized access attempts; consider temporary isolation of OpenMetadata from production data platforms until patched.

Threat Intelligence Overview

EPSS Score

0.0%

Top 98% exploitable

Exploit

POC

Public exploit code exists

Data Quality

4 sources

Confidence: Medium

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC Yes

EPSS 0.0%

Patch available Yes

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Human Impact

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +38

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Affected Products (CPE)GitHub Advisory

cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:*

More in Openmetadata

View all

CVE-2024-28255 CRITICAL Emergency POC

9.8 Mar 15

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

CVE-2024-28254 HIGH Act Now POC

8.8 Mar 15

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

CVE-2024-28847 HIGH This Week POC

8.8 Mar 15

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

CVE-2024-28253 HIGH This Week POC

8.8 Mar 15

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

CVE-2026-22244 HIGH This Week POC

8.5 Jan 08

Remote code execution in OpenMetadata versions 1.5.0 through 1.11.3 is achievable by an authenticated administrator via

CVE-2024-55238 HIGH This Week POC

7.1 Apr 17

OpenMetadata <=1.4.1 is vulnerable to SQL Injection. Rated high severity (CVSS 7.1), this vulnerability is remotely expl

CVE-2026-100373 MEDIUM This Month POC

5.1 Sep 25

Blind server-side request forgery in OpenMetadata through 2.0.2 allows an authenticated user holding permission to creat

CVE-2024-28848 HIGH This Week

8.8 Mar 15

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

CVE-2026-81029 HIGH This Week

8.5 Aug 26

JWT token disclosure in OpenMetadata's SAML and OIDC/OAuth2 authentication flows enables account takeover by exploiting

CVE-2025-50468 MEDIUM This Week POC

6.5 Aug 08

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. Rated medium severity (CVSS 6.5), this vulnerability is remotely ex

CVE-2025-50467 MEDIUM This Month

6.5 Aug 08

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. Rated medium severity (CVSS 6.5), this vulnerability is remotely ex

CVE-2025-50466 HIGH This Month POC

7.1 Aug 08

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. Rated high severity (CVSS 7.1), this vulnerability is remotely expl

Same weakness CWE-269 – Improper Privilege Management

View all

CVE-2017-5689 CRITICAL POC

9.8

CVE-2021-20021 CRITICAL POC

9.8

CVE-2017-12635 CRITICAL POC

9.8

CVE-2012-3993 CRITICAL POC

9.3

CVE-2017-11467 CRITICAL POC

9.8

CVE-2014-1510 CRITICAL POC

9.8

CVE-2014-1511 CRITICAL POC

9.8

CVE-2019-1405 HIGH POC

7.8

References

Advisories & patches

REF https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back