CVE-2025-50467 | OpenMetadata up to 1.4.4 TestDefinitionDAO Interface listCount supportedDataTypeParam sql injection

A vulnerability was found in OpenMetadata up to 1.4.4. It has been classified as critical. Affected is the function listCount of the component TestDefinitionDAO Interface. The manipulation of the argument supportedDataTypeParam leads to sql injection.

This vulnerability is traded as CVE-2025-50467. It is possible to launch the attack remotely. There is no exploit available.