CVE-2023-41886: Openrefine

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue.

Affected products

• Openrefine Openrefine: before 3.7.5 (fixed in 3.7.5)

Published 2023-09-15. Last modified 2026-06-17.