High · published January 8, 2026
⚡ Administrative access is a game-changer! A remote code execution vulnerability exists in OpenMetadata that stems from Server-Side Template Injection in FreeMarker email templates for versions prior to 1.11.4. 🔥 Think of it like a restaurant where a chef can make any dish just by telling the waiter the right ingredients, but only if they have the chef's hat. An attacker with admin privileges can craft malicious templates to execute any code on the server, a recipe for disaster! If exploited, this vulnerability could allow an attacker with administrative access to run arbitrary code on the server, potentially compromising sensitive data or altering the system’s functionality. Imagine an intruder taking control of the kitchen, cooking up trouble without anyone noticing — absolutely devastating!
Think of it like a restaurant where a chef can make any dish just by telling the waiter the right ingredients, but only if they have the chef's hat. An attacker with admin privileges can craft malicious templates to execute any code on the server, a recipe for disaster! This vulnerability allows for remote code execution via Server-Side Template Injection within FreeMarker email templates, which can be triggered if an attacker has admin access and injects malicious code into the templates.
If exploited, this vulnerability could allow an attacker with administrative access to run arbitrary code on the server, potentially compromising sensitive data or altering the system’s functionality. Imagine an intruder taking control of the kitchen, cooking up trouble without anyone noticing — absolutely devastating! Immediate action is required! Upgrade OpenMetadata to version 1.11.4 or later to close this loophole. Additionally, review and tighten admin privilege usage to minimize risk exposure. You’ve got this! With these steps, you’ll have your system protected from any unwanted culinary surprises! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| open-metadata/openmetadata | < 1.11.4 | 1.11.4 |