Openmeter vulnerabilities
We track 2 vulnerabilities in Openmeter products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Openmeter vulnerabilities
- 8.9 High severity
openmeter: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or modify metering event data, and potentially cause denial of service, via crafted user-cont
- 9.3 Critical severity
OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of…
OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or usageAttribution.subjectK