metabase Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by metabase
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Database Exposure in Metabase Software by Metabase
CVE-2026-72900MetabaseMetabase7.1HIGHSQL Injection Vulnerability in Metabase Affects Data Security
CVE-2026-72899MetabaseMetabase10CRITICALSQL Injection Vulnerability in Metabase by Metabase, Inc.
CVE-2026-72898MetabaseMetabase10CRITICALFile Reading Vulnerability in Metabase by Metabase, Inc.
CVE-2026-50147MetabaseMetabase7.6HIGHRemote Code Execution Vulnerability in Metabase by Flawed Snowflake JDBC Driver
CVE-2026-50148MetabaseMetabase10CRITICALCVE Vulnerability in Metabase Affected by Unsafe H2 Connection Properties
CVE-2026-59826MetabaseMetabase9.1CRITICALDeserialization Flaw in Metabase's H2 Database Connection
CVE-2026-59827MetabaseMetabase👾🟡9.9CRITICALRemote Code Execution in Metabase Enterprise Affecting Open Source Business Intelligence Tool
CVE-2026-33725MetabaseMetabase7.2HIGHData Exposure Vulnerability in Metabase by Metabase
CVE-2026-27464MetabaseMetabase7.7HIGHMetabase vulnerable to remote code execution via POST /api/setup/validate API endpoint
CVE-2023-37470MetabaseMetabase10CRITICALRemote Code Execution Vulnerability in Metabase by Metabase
CVE-2023-38646MetabaseMetabase👾🟡EPSS 98%9.8CRITICALMetabase vulnerable to Remote Code Execution via H2
CVE-2022-39361MetabaseMetabase8.8HIGHMetabase vulnerable to arbitrary SQL execution from queryhash
CVE-2022-39362MetabaseMetabase8.8HIGHDatabase bypassing any permissions in Metabase via SQlite attach
CVE-2022-24854MetabaseMetabase8HIGHXSS vulnerability in Metabase
CVE-2022-24855MetabaseMetabase8.7HIGHGeoJSON URL validation can expose server files and environment variables to unauthorized users
CVE-2021-41277MetabaseMetabase👾🟡EPSS 97%🦅10CRITICAL