Skip to content
OpenAdvisories

Vendor

metabase

31 known vulnerabilities.

Products

metabase 31
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-22805

    Metabase channel test endpoint can reach internal local addresses

    Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulne…

    metabase metabase
  • Low 1.8
    CVE-2025-32382

    Snowflake credentials logged by the Metabase backend

    Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase (either updating a password or changing password to private key or vice versa), Metabase would not always purge older Sno…

    metabase metabase
  • Low 2.1
    CVE-2025-30371

    Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint

    Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase instances that are using …

    metabase metabase