CVE-2026-100373 | OpenMetadata up to 2.0.2 URL Validation URLValidator.validateURL server-side request forgery

A vulnerability labeled as critical has been found in OpenMetadata up to 2.0.2. Impacted is the function URLValidator.validateURL of the component URL Validation. The manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-100373. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More