CVE-2026-18801 | OpenMeter up to 1.0.0-beta.231 Usage Attribution usageAttribution.key/usageAttribution.subjectKeys sql injection

August 4, 2026 Yanac

A vulnerability marked as critical has been reported in OpenMeter up to 1.0.0-beta.231. This issue affects some unknown processing of the component Usage Attribution Handler. Performing a manipulation of the argument usageAttribution.key/usageAttribution.subjectKeys results in sql injection.

This vulnerability is identified as CVE-2026-18801. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More