metabase Summary
Latest vulnerabilities published by metabase
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Database Exposure in Metabase Software by Metabase
CVE-2026-72900MetabaseMetabase7.1HIGHSQL Injection Vulnerability in Metabase Affects Data Security
CVE-2026-72899MetabaseMetabase10CRITICALSQL Injection Vulnerability in Metabase by Metabase, Inc.
CVE-2026-72898MetabaseMetabase10CRITICALFile Reading Vulnerability in Metabase by Metabase, Inc.
CVE-2026-50147MetabaseMetabase7.6HIGHRemote Code Execution Vulnerability in Metabase by Flawed Snowflake JDBC Driver
CVE-2026-50148MetabaseMetabase10CRITICALCVE Vulnerability in Metabase Affected by Unsafe H2 Connection Properties
CVE-2026-59826MetabaseMetabase9.1CRITICALDeserialization Flaw in Metabase's H2 Database Connection
CVE-2026-59827MetabaseMetabase👾🟡9.9CRITICALRemote Code Execution in Metabase Enterprise Affecting Open Source Business Intelligence Tool
CVE-2026-33725MetabaseMetabase7.2HIGHData Exposure Vulnerability in Metabase by Metabase
CVE-2026-27464MetabaseMetabase7.7HIGHData Analytics Platform Vulnerability in Metabase by Metabase
CVE-2026-22805MetabaseMetabase2.1LOWInefficient Regular Expression Complexity in Metabase's parseDataUri Function
CVE-2025-5895MetabaseMetabase👾🟡5.3MEDIUMInsufficient Connection Purge in Metabase for Snowflake Integration
CVE-2025-32382MetabaseMetabase1.8LOWLocal Link Access Protection Circumvention in Metabase by Metabase Inc.
CVE-2025-30371MetabaseMetabase2.1LOWData Exposure in Metabase Enterprise Edition Affects User Permissions
CVE-2025-27141MetabaseMetabase4.8MEDIUMData Exposure Flaw in Metabase Open-Source Analytics Platform
CVE-2024-55951MetabaseMetabase vulnerable to remote code execution via POST /api/setup/validate API endpoint
CVE-2023-37470MetabaseMetabase10CRITICALRemote Code Execution Vulnerability in Metabase by Metabase
CVE-2023-38646MetabaseMetabase👾🟡EPSS 98%9.8CRITICALMissing SQL permissions check in metabase
CVE-2023-32680MetabaseMetabase5.8MEDIUMMetabase subject to Exposure of Sensitive Information to an Unauthorized Actor
CVE-2023-23628MetabaseMetabase5.7MEDIUMMetabase subject to Improper Privilege Management
CVE-2023-23629MetabaseMetabase6.3MEDIUMMetabase vulnerable to circumvention of Locked parameter in Signed Embedding
CVE-2022-39358MetabaseMetabase6.5MEDIUMMetabase's GeoJSON validation doesn't prevent redirects to blocked URLs
CVE-2022-39359MetabaseMetabase6.5MEDIUMMetabase SSO users able to circumvent IdP login by doing password reset
CVE-2022-39360MetabaseMetabase6.5MEDIUMMetabase vulnerable to Remote Code Execution via H2
CVE-2022-39361MetabaseMetabase8.8HIGHMetabase vulnerable to arbitrary SQL execution from queryhash
CVE-2022-39362MetabaseMetabase8.8HIGH