Skip to content
OpenAdvisories

Vendor

metabase

31 known vulnerabilities.

Products

metabase 31
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-103928

    Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions

    Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user…

    metabase metabase
  • Critical 10.0
    CVE-2026-72899

    Metabase SQL injection via public card or dashboard

    Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.

    metabase metabase
  • Critical 10.0
    CVE-2026-72898 Exploited Public exploit Scanner template EPSS 98%

    Metabase SQL injection via password reset endpoint

    Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

    metabase metabase
    KEV Aug 11, 2026
  • Critical 10.0
    CVE-2026-50148

    Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write

    Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code exec…

    metabase metabase
  • Critical 9.1
    CVE-2026-59826

    Metabase: Arbitrary Code Execution via Database Connection Detail Bypass

    Metabase is an open-source business intelligence and embedded analytics tool. From 1.55.0 until 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2, Metabase did not validate unsafe H2 connection properties on one database-creation code path, allowing an authenticated a…

    metabase metabase
  • Critical 9.9
    CVE-2026-59827 Public exploit

    Metabase: Unsafe Deserialization of H2 Query Results

    Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects retur…

    metabase metabase
  • Critical 10.0
    CVE-2023-37470

    Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint

    Metabase is an open-source business intelligence and analytics platform. Prior to versions 0.43.7.3, 0.44.7.3, 0.45.4.3, 0.46.6.4, 1.43.7.3, 1.44.7.3, 1.45.4.3, and 1.46.6.4, a vulnerability could potentially allow remote code execution on one's Metabase serv…

    metabase metabase
  • Critical 10.0
    CVE-2021-41277 Exploited Public exploit Scanner template EPSS 97%

    GeoJSON URL validation can expose server files and environment variables to unauthorized users

    Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment varia…

    metabase metabase
    KEV Nov 12, 2024