CVE-2026-46481 OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users
Non-admin users can leak cleartext database passwords and ingestion-bot JWTs via the TEST_CONNECTION workflow, enabling unauthorized access to sensitive APIs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46481?
CVE-2026-46481 is a high-severity vulnerability in open-metadata OpenMetadata, published on 8 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
OpenMetadata is a unified metadata platform. Prior to version 1.12.4, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, in the HTTP 201 response of POST /api/v1/automations/workflows, both the cleartext database password in request.connection.config.password and the ingestion bot JWT in openMetadataServerConnection.securityConfig.jwtToken. The leaked ingestion-bot token can then be reused as Authorization: Bearer <jwt> to access sensitive service APIs with bot-level privileges. This issue has been patched in version 1.12.4.
Weakness: CWE-201
Which versions are affected by CVE-2026-46481?
2 open source packages ship an affected version, including org.open-metadata:openmetadata-service.
| Package | Affected | Fixed in |
|---|---|---|
org.open-metadata:openmetadata-service Maven | All versions | 1.12.4 |
org.open-metadata:openmetadata-service Maven | All versions | 1.12.4 |
How do I fix CVE-2026-46481?
Upgrade org.open-metadata:openmetadata-service to 1.12.4 or later.
Is CVE-2026-46481 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-46481 exists.
Sources
Also known as GHSA-9vmh-whc4-7phg.