An API endpoint used for testing database connections returns sensitive data in its response. A non‑admin SSO user can invoke POST /api/v1/automations/workflows and receive the clear‑text database password in the request.connection.config.password field and the ingestion‑bot JWT in openMetadataServerConnection.securityConfig.jwtToken. With the leaked JWT the user can authenticate as the ingestion bot and call privileged APIs. The flaw is a clear‑text credential disclosure (CWE‑201).

All installations of the OpenMetadata platform before version 1.12.4 run the vulnerable flow. The product is identified as open-metadata:OpenMetadata; users who have non‑admin SSO access are able to trigger the workflow and trigger the leakage.

The CVSS score of 8.3 indicates high severity. EPSS is not available, and the vulnerability is not listed in CISA KEV. Attackers can exploit the flaw through the normal API by simply having non‑admin SSO credentials; no additional privilege is required. The compromised JWT can be reused to access sensitive service APIs with bot‑level permissions, potentially allowing data exfiltration or further escalation.