# CVE-2026-100373: OpenMetadata server-side request forgery in URLValidator

Source: https://junglewise.ai/threats/cve-2026-100373-openmetadata-through-2-0-2-contains-a-server-side-request  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-25. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100373 · Severity: medium · CVSS 4.1 · Published 2026-09-25

OpenMetadata is a metadata management platform for data governance and discovery. An administrator or user with EventSubscription creation privileges can bypass URL validation to direct the server to send requests to internal networks, cloud metadata endpoints, or local services. This enables attackers to exfiltrate data to external webhooks, probe internal infrastructure, and access private resources like cloud metadata services.

Technologies: [OpenMetadata](https://junglewise.ai/threats/technologies/openmetadata). Vendors: [OpenMetadata](https://junglewise.ai/threats/vendors/openmetadata).

## Quick answers

**Is CVE-2026-100373 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100373 being exploited in the wild.

**How severe is CVE-2026-100373?** Medium severity, with a CVSS score of 4.1, published 25 September 2026.

**Which products and versions are affected?** OpenMetadata through 2.0.2.

**Is there a fix for CVE-2026-100373?** A patch was published on 2026-09-21: Fix merged in PR #33439 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100373 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-100373?** Check whether you run OpenMetadata at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The URLValidator.validateURL function in OpenMetadata uses regex pattern matching against textual hostnames without performing DNS resolution, allowing DNS names, localhost aliases, IPv4 decimal/hex formats, and other bypasses to reach internal addresses. Authenticated users with EventSubscription creation permissions can set webhook destinations to arbitrary URLs; when change events fire, the AlertPublisher sends HTTP requests from the server pod, leaking request responses and enabling blind SSRF probing via HTTP status codes. DNS rebinding and HTTP redirects further expand the attack surface.

## Affected products

- OpenMetadata OpenMetadata through 2.0.2

## Timeline

- 2026-09-25: disclosed: CVE-2026-100373 published
- 2026-09-21: patched: Fix merged in PR #33439

## References

- [https://gist.github.com/naif-alfardan/8a69e0648e11b07abe63f949346179c1](https://gist.github.com/naif-alfardan/8a69e0648e11b07abe63f949346179c1)
- [https://github.com/open-metadata/OpenMetadata](https://github.com/open-metadata/OpenMetadata)

## Related threats

- [OpenMetadata token leakage via unvalidated post-authentication redirect](https://junglewise.ai/threats/cve-2026-81029-openmetadata-token-leakage-via-unvalidated-post-authentication)
- [OpenMetadata sensitive information leak in TEST_CONNECTION workflow](https://junglewise.ai/threats/cve-2026-46481-openmetadata-sensitive-information-leak-in-test-connection)