CVE-2026-72899
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.
Risk Assessment
An attacker can gain unauthorized access to data in the database, potentially leading to data confidentiality and integrity breaches.
Recommendation
Apply available security patches for Metabase and restrict access to public cards and dashboards.
Other vulnerabilities in Metabase
See all- CVE-2026-72898CriticalActively exploited
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
- CVE-2026-50148Critical
A vulnerability in Metabase allows a user with permission to add or edit database connections to achieve remote code execution on the Metabase server. It exploits a flaw in the Snowflake JDBC driver that can write arbitrary files anywhere on the host, including replacing Metabase's own database driver files that later execute inside the Metabase process.
- CVE-2026-59827Critical
Metabase prior to versions 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4 deserializes arbitrary Java objects returned in OTHER type columns from H2 native queries without validation. An authenticated user able to run native H2 queries can execute code on the Metabase server.
- CVE-2026-59826Critical
Metabase, an open-source business intelligence tool, contains a vulnerability allowing an authenticated administrator to execute arbitrary Java code on the server by registering a crafted H2 database connection. The issue affects versions from 1.55.0 up to 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2.
- CVE-2021-41277CriticalActively exploited
Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (including environment variables). URLs were not validated prior to being loaded.
- CVE-2026-92813Medium
Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to unauthenticated callers.
- CVE-2026-86116Medium
Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any authenticated user to create, modify, and delete glossary entries. Attackers can submit requests to POST, PUT, and DELETE glossary endpoints to tamper with instance-wide business glossary data without proper authorization.
- CVE-2026-72900Medium
Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.
- CVE-2026-50147High
Metabase from version 1.57.0 to 1.57.19.1, 1.58.14.1, 1.59.10, and 1.60.4 contains a vulnerability that allows an attacker with access to database connection configuration to read arbitrary files from the Metabase server's filesystem. By adding unsafe JDBC parameters to a MySQL or MariaDB connection, the driver can read files from the Metabase host and expose their contents through queries or validation error messages.
Original NVD description (English source)
Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.