A vulnerability, which was classified as critical, has been found in open-metadata OpenMetadata up to 1.2.3. This issue affects the function CompiledRule::validateExpression of the file /api/v1/policies/validation/condition/. The manipulation leads to code injection.

The identification of this vulnerability is CVE-2024-28848. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.