Listen to this Post
How the CVE-2025-50466 Works
OpenMetadata versions up to 1.4.4 contain a SQL injection vulnerability in the TestDefinitionDAO interface. The flaw exists in the listCount function where the entityType parameter is directly concatenated into a SQL query without proper sanitization. Attackers can manipulate this parameter to inject malicious SQL commands, allowing unauthorized database access. The vulnerability enables data extraction, modification, or deletion. The attack requires no authentication and can be executed remotely through crafted API requests.
DailyCVE Form
Platform: OpenMetadata
Version: <=1.4.4
Vulnerability: SQL Injection
Severity: Critical
Date: 08/08/2025
Prediction: Patch by 09/15/2025
What Undercode Say
SELECT FROM test_definition WHERE entityType = 'malicious_payload';
requests.get('http://target/api/v1/testDefinition/count?entityType=1%20OR%201=1--')
How Exploit
1. Craft malicious entityType parameter
2. Send HTTP request to vulnerable endpoint
3. Extract database information
Protection from this CVE
1. Update to patched version
2. Parameterized queries
3. Input validation
Impact
1. Data leakage
2. Unauthorized access
3. Database compromise
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
