open-metadata — Vulnerabilities & Security Advisories 7

Open-metadata is a metadata framework designed for data discovery, governance, and collaboration across organizations. Historically, it has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and access control flaws. The project maintains a moderate security posture with seven CVEs recorded, primarily affecting API endpoints and web interfaces. While no major public incidents have been documented, the presence of RCE vulnerabilities in past versions indicates potential for significant compromise if unpatched. Regular updates and proper configuration are recommended to mitigate risks, particularly for internet-exposed deployments handling sensitive metadata.