# metabase.

Every CVE that names metabase among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions](https://agentprime.io/advisories/CVE-2026-103928.md)
  `CVE-2026-103928` · CVE record: metabase metabase · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass](https://agentprime.io/advisories/CVE-2026-92813.md)
  `CVE-2026-92813` · CVE record: metabase Metabase · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API](https://agentprime.io/advisories/CVE-2026-86116.md)
  `CVE-2026-86116` · CVE record: metabase metabase · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2026 · Tags: Broken access control
- [Metabase information exposure](https://agentprime.io/advisories/CVE-2026-72900.md)
  `CVE-2026-72900` · CVE record: Metabase Metabase · CVSS 7.1 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Metabase SQL injection via public card or dashboard](https://agentprime.io/advisories/CVE-2026-72899.md)
  `CVE-2026-72899` · CVE record: Metabase Metabase · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: SQL injection
- [Metabase SQL injection via password reset endpoint](https://agentprime.io/advisories/CVE-2026-72898.md)
  `CVE-2026-72898` · CVE record: Metabase Metabase · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.99 · Not analysed yet · Published 10 Aug 2026 · Tags: SQL injection
- [Metabase: Arbitrary File Read via MySQL Connection Property Injection](https://agentprime.io/advisories/CVE-2026-50147.md)
  `CVE-2026-50147` · CVE record: metabase metabase · CVSS 7.6 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection
- [Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write](https://agentprime.io/advisories/CVE-2026-50148.md)
  `CVE-2026-50148` · CVE record: metabase metabase · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: Path traversal
- [Metabase: Arbitrary Code Execution via Database Connection Detail Bypass](https://agentprime.io/advisories/CVE-2026-59826.md)
  `CVE-2026-59826` · CVE record: metabase metabase · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2026 · Tags: Code injection
- [Metabase: Unsafe Deserialization of H2 Query Results](https://agentprime.io/advisories/CVE-2026-59827.md)
  `CVE-2026-59827` · CVE record: metabase metabase · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2026 · Tags: Insecure deserialization
- [Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import](https://agentprime.io/advisories/CVE-2026-33725.md)
  `CVE-2026-33725` · CVE record: metabase metabase · CVSS 7.2 High · Not analysed yet · Published 27 Mar 2026 · Tags: Insecure deserialization
- [Metabase: Server-Side Template Injection via Notifications Endpoint Leads to RCE](https://agentprime.io/advisories/CVE-2026-27464.md)
  `CVE-2026-27464` · CVE record: metabase metabase · CVSS 7.7 High · Not analysed yet · Published 21 Feb 2026 · Tags: Code injection
- [Metabase channel test endpoint can reach internal local addresses](https://agentprime.io/advisories/CVE-2026-22805.md)
  `CVE-2026-22805` · CVE record: metabase metabase · CVSS 2.1 Low · Not analysed yet · Published 12 Jan 2026 · Tags: Server-side request forgery (SSRF)
- [Metabase dom.js parseDataUri redos](https://agentprime.io/advisories/CVE-2025-5895.md)
  `CVE-2025-5895` · CVE record: Metabase · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: Denial of service
- [Snowflake credentials logged by the Metabase backend](https://agentprime.io/advisories/CVE-2025-32382.md)
  `CVE-2025-32382` · CVE record: metabase metabase · CVSS 1.8 Low · Not analysed yet · Published 10 Apr 2025 · Tags: Information disclosure
- [Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint](https://agentprime.io/advisories/CVE-2025-30371.md)
  `CVE-2025-30371` · CVE record: metabase metabase · CVSS 2.1 Low · Not analysed yet · Published 28 Mar 2025 · Tags: Path traversal
- [Metabase Enterprise Edition allows cached questions to leak data to impersonated users](https://agentprime.io/advisories/CVE-2025-27141.md)
  `CVE-2025-27141` · CVE record: metabase metabase · CVSS 4.8 Medium · Not analysed yet · Published 24 Feb 2025 · Tags: Broken access control
- [Metabase sandboxed users could see filter values from other sandboxed users](https://agentprime.io/advisories/CVE-2024-55951.md)
  `CVE-2024-55951` · CVE record: metabase metabase · CVSS 4.8 Medium · Not analysed yet · Published 16 Dec 2024 · Tags: Information disclosure
- [Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint](https://agentprime.io/advisories/CVE-2023-37470.md)
  `CVE-2023-37470` · CVE record: metabase metabase · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2023 · Tags: Code injection
- [Missing SQL permissions check in metabase](https://agentprime.io/advisories/CVE-2023-32680.md)
  `CVE-2023-32680` · CVE record: metabase metabase · CVSS 5.8 Medium · Not analysed yet · Published 18 May 2023 · Tags: Authentication bypass
- [Metabase subject to Improper Privilege Management](https://agentprime.io/advisories/CVE-2023-23629.md)
  `CVE-2023-23629` · CVE record: metabase metabase · CVSS 6.3 Medium · Not analysed yet · Published 28 Jan 2023 · Tags: Information disclosure, Privilege escalation
- [Metabase subject to Exposure of Sensitive Information to an Unauthorized Actor](https://agentprime.io/advisories/CVE-2023-23628.md)
  `CVE-2023-23628` · CVE record: metabase metabase · CVSS 5.7 Medium · Not analysed yet · Published 28 Jan 2023 · Tags: Information disclosure
- [Server-side request forgery in Metabase](https://agentprime.io/advisories/CVE-2022-43776.md)
  `CVE-2022-43776` · CVE record: Metabase · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: Server-side request forgery (SSRF)
- [Metabase vulnerable to arbitrary SQL execution from queryhash](https://agentprime.io/advisories/CVE-2022-39362.md)
  `CVE-2022-39362` · CVE record: metabase metabase · CVSS 8.8 High · Not analysed yet · Published 26 Oct 2022 · Tags: CWE-356
- [Metabase vulnerable to Remote Code Execution via H2](https://agentprime.io/advisories/CVE-2022-39361.md)
  `CVE-2022-39361` · CVE record: metabase metabase · CVSS 8.8 High · Not analysed yet · Published 26 Oct 2022 · Tags: CWE-20, CWE-441
- [Metabase SSO users able to circumvent IdP login by doing password reset](https://agentprime.io/advisories/CVE-2022-39360.md)
  `CVE-2022-39360` · CVE record: metabase metabase · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: Authentication bypass
- [Metabase's GeoJSON validation doesn't prevent redirects to blocked URLs](https://agentprime.io/advisories/CVE-2022-39359.md)
  `CVE-2022-39359` · CVE record: metabase metabase · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: Information disclosure
- [Metabase vulnerable to circumvention of Locked parameter in Signed Embedding](https://agentprime.io/advisories/CVE-2022-39358.md)
  `CVE-2022-39358` · CVE record: metabase metabase · CVSS 6.5 Medium · Not analysed yet · Published 26 Oct 2022 · Tags: Information disclosure
- [File system exposure in Metabase](https://agentprime.io/advisories/CVE-2022-24853.md)
  `CVE-2022-24853` · CVE record: metabase metabase · CVSS 5.9 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: Information disclosure
- [Database bypassing any permissions in Metabase via SQlite attach](https://agentprime.io/advisories/CVE-2022-24854.md)
  `CVE-2022-24854` · CVE record: metabase metabase · CVSS 8.0 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-610
- [XSS vulnerability in Metabase](https://agentprime.io/advisories/CVE-2022-24855.md)
  `CVE-2022-24855` · CVE record: metabase metabase · CVSS 8.7 High · Not analysed yet · Published 14 Apr 2022 · Tags: Cross-site scripting (XSS)
- [GeoJSON URL validation can expose server files and environment variables to unauthorized users](https://agentprime.io/advisories/CVE-2021-41277.md)
  `CVE-2021-41277` · CVE record: metabase metabase · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.97 · Not analysed yet · Published 17 Nov 2021 · Tags: Information disclosure
- [Metabase: Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote…](https://agentprime.io/advisories/CVE-2018-0697.md)
  `CVE-2018-0697` · CVE record: Metabase, Inc. Metabase · No CVSS score · Not analysed yet · Published 15 Nov 2018

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=metabase>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/metabase/>. Everything for agents: <https://agentprime.io/llms.txt>.