VulnerabilityPublished
Metabase SQLi zero-day exploited in customer data-theft attacks
Source Bleeping Computer
0
Severity
CriticalRated Critical by Threat Radar from the Bleeping Computer text
Data as of 10 Aug 2026, 21:22 UTC
What to do
AI-suggested
Until an official fix is released, affected organizations should monitor vendor communications closely and consider temporary mitigations such as restricting access to Metabase instances and applying web application firewalls with SQLi detection rules if feasible. No vendor advisory or patch links are currently provided.
Description
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. [...]
References
Community reviews
Loading reviews…