Metabase

Products

Exploited and recent CVEs

• CVE-2026-72898 Critical 10.0 Exploited Metabase SQL injection via password reset endpoint 98.8%
• CVE-2021-41277 Critical 10.0 Exploited GeoJSON URL validation can expose server files and environment variables to unauthorized users 97.2%
• CVE-2026-103928 Critical 9.3 Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions 0.4%
• CVE-2026-92813 Medium 4.9 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass 0.5%
• CVE-2026-86116 Medium 6.5 Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API 0.4%
• CVE-2026-72900 Medium 6.5 Metabase information exposure 0.4%
• CVE-2026-72899 Critical 10.0 Metabase SQL injection via public card or dashboard 0.8%
• CVE-2026-50147 High 7.6 Metabase: Arbitrary File Read via MySQL Connection Property Injection 0.3%
• CVE-2026-50148 Critical 10.0 Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write 0.8%
• CVE-2026-59826 Critical 9.1 Metabase: Arbitrary Code Execution via Database Connection Detail Bypass 1.0%
• CVE-2026-59827 Critical 9.9 Metabase: Unsafe Deserialization of H2 Query Results 3.8%
• CVE-2026-33725 High 7.2 Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import 0.8%
• CVE-2026-27464 High 7.7 Metabase: Server-Side Template Injection via Notifications Endpoint Leads to RCE 0.3%
• CVE-2026-22805 Low 2.1 Metabase channel test endpoint can reach internal local addresses 0.2%
• CVE-2025-32382 Low 1.8 Snowflake credentials logged by the Metabase backend 0.4%
• CVE-2025-30371 Low 2.1 Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint 0.4%
• CVE-2025-27141 Medium 4.8 Metabase Enterprise Edition allows cached questions to leak data to impersonated users 0.4%
• CVE-2024-55951 Medium 4.8 Metabase sandboxed users could see filter values from other sandboxed users 0.4%
• CVE-2023-37470 Critical 10.0 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint 1.3%
• CVE-2023-32680 Medium 5.8 Missing SQL permissions check in metabase 0.6%
• CVE-2023-23629 Medium 6.3 Metabase subject to Improper Privilege Management 0.4%
• CVE-2023-23628 Medium 5.7 Metabase subject to Exposure of Sensitive Information to an Unauthorized Actor 0.4%
• CVE-2022-39358 Medium 6.5 Metabase vulnerable to circumvention of Locked parameter in Signed Embedding 0.5%
• CVE-2022-39362 High 8.8 Metabase vulnerable to arbitrary SQL execution from queryhash 1.0%
• CVE-2022-39360 Medium 6.5 Metabase SSO users able to circumvent IdP login by doing password reset 0.6%
• CVE-2022-39359 Medium 6.5 Metabase's GeoJSON validation doesn't prevent redirects to blocked URLs 0.7%
• CVE-2022-39361 High 8.8 Metabase vulnerable to Remote Code Execution via H2 1.2%
• CVE-2022-24853 Medium 5.9 File system exposure in Metabase 2.5%
• CVE-2022-24854 High 8.0 Database bypassing any permissions in Metabase via SQlite attach 1.1%
• CVE-2022-24855 High 8.7 XSS vulnerability in Metabase 0.7%