CVE-2022-32272: Opswat Metadefender

Critical severity, CVSS 9.8. EPSS: 9.6% chance of exploitation in the next 30 days.

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.

Affected products

• Opswat Metadefender: before 5.1.2 (fixed in 5.1.2)

Published 2022-06-09. Last modified 2026-06-17.