CVE-2026-26010

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-26010", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-09T21:36:29.553Z", "datePublished": "2026-02-11T21:05:38.735Z", "dateUpdated": "2026-02-12T21:22:40.311Z"}, "containers": {"cna": {"title": "Leaky JWTs in OpenMetadata exposing highly-privileged bot users", "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "lang": "en", "description": "CWE-269: Improper Privilege Management", "type": "CWE"}]}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "version": "3.0"}}], "references": [{"name": "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r"}, {"name": "https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release", "tags": ["x_refsource_MISC"], "url": "https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release"}], "affected": [{"vendor": "open-metadata", "product": "OpenMetadata", "versions": [{"version": "< 1.11.8", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-11T21:05:38.735Z"}, "descriptions": [{"lang": "en", "value": "OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8."}], "source": {"advisory": "GHSA-pqqf-7hxm-rj5r", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-12T21:22:33.647827Z", "id": "CVE-2026-26010", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-12T21:22:40.311Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Leaky JWTs in OpenMetadata exposing highly-privileged bot users", "source": {"advisory": "GHSA-pqqf-7hxm-rj5r", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "open-metadata", "product": "OpenMetadata", "versions": [{"status": "affected", "version": "< 1.11.8"}]}], "references": [{"url": "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r", "name": "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release", "name": "https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269: Improper Privilege Management"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-11T21:05:38.735Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-26010", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-12T21:22:33.647827Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-02-12T21:22:36.892Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-26010", "state": "PUBLISHED", "dateUpdated": "2026-02-11T21:05:38.735Z", "dateReserved": "2026-02-09T21:36:29.553Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-02-11T21:05:38.735Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "OpenMetadata", "vendor": "open-metadata", "versions": [{"status": "affected", "version": "< 1.11.8"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:open-metadata:openmetadata:*:*:*:*:*:*:*:*", "matchCriteriaId": "FED5927F-D11C-4CD5-9571-17B671A160A5", "versionEndExcluding": "1.11.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines leak JWTs used by ingestion-bot for certain services (Glue / Redshift / Postgres). Any read-only user can gain access to a highly privileged account, typically which has the Ingestion Bot Role. This enables destructive changes in OpenMetadata instances, and potential data leakage (e.g. sample data, or service metadata which would be unavailable per roles/policies). This vulnerability is fixed in 1.11.8."}, {"lang": "es", "value": "OpenMetadata es una plataforma de metadatos unificada. Anterior a la 1.11.8, las llamadas emitidas por la UI contra /api/v1/ingestionPipelines filtraban JWTs utilizados por ingestion-bot para ciertos servicios (Glue / Redshift / Postgres). Cualquier usuario de solo lectura puede obtener acceso a una cuenta altamente privilegiada, t\u00edpicamente la que tiene el Rol de Bot de Ingesti\u00f3n. Esto permite cambios destructivos en las instancias de OpenMetadata y una posible fuga de datos (por ejemplo, datos de muestra o metadatos de servicio que no estar\u00edan disponibles seg\u00fan los roles/pol\u00edticas). Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 1.11.8."}], "id": "CVE-2026-26010", "lastModified": "2026-06-17T10:25:35.587", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.7, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26010", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-12T21:22:33.647827Z", "version": "2.0.3"}}]}, "published": "2026-02-11T21:16:21.117", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/open-metadata/OpenMetadata/releases/tag/1.11.8-release"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-pqqf-7hxm-rj5r"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.11.8)"}}], "product": "openmetadata", "vendor": "open-metadata"}], "analysis": {"en": {"generated_at": "2026-04-17T20:11:27.426775+00:00", "value": {"mitigation_remediation": ["Upgrade to OpenMetadata\u202f1.11.8 or a later version to eliminate the JWT leakage.", "If an upgrade is not immediately possible, restrict or remove access to the /api/v1/ingestionPipelines endpoint for read\u2011only users and enforce stricter role checks on ingestion\u2011bot tokens.", "Deploy monitoring on ingestion pipeline activity to detect unauthorized changes or token usage and alert stakeholders promptly."], "summary": {"action": "Apply Patch", "impact": "Privilege Escalation via Leaked JWTs"}, "threat_synthesis": {"affected_systems": "All OpenMetadata deployments running any release older than 1.11.8 are affected. The issue impacts the UI endpoint /api/v1/ingestionPipelines and affects the ingestion\u2011bot identities used for Glue, Redshift, and Postgres pipelines across those releases.", "description_and_impact": "OpenMetadata versions prior to 1.11.8 expose JSON Web Tokens (JWTs) issued to the ingestion\u2011bot when the UI calls the /api/v1/ingestionPipelines endpoint. An attacker with a read\u2011only account can capture these privileged tokens and use them to act as the ingestion\u2011bot, which has broad rights to modify pipeline configurations. The vulnerability creates a privilege escalation path that permits destructive changes to metadata, potential data leakage, and unauthorized manipulation of ingestion services. The weakness is a missing authorization check (CWE\u2011269).", "risk_and_exploitability": "The CVSS score of 7.6 indicates high severity, while the EPSS score of <1% shows a low probability of exploitation under current conditions and the vulnerability is not listed in the CISA KEV catalog. Attackers would need access to a read\u2011only user session to trigger the vulnerable endpoint. Once the JWT is captured, the token grants full control over ingestion pipelines, enabling schema alterations, data exports, or other destructive actions. The exploit path requires only standard UI interaction, meaning any authenticated user with read\u2011only privileges can potentially exploit it."}}}}, "created": "2026-02-12T09:35:31.264109+00:00", "updated": "2026-04-17T20:15:27.004321+00:00", "vendors": ["open-metadata", "open-metadata$PRODUCT$openmetadata"]}