Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day.

The vulnerability (CVSS score: 10.0), which does not carry a CVE identifier, allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, enabling them to gain

guid

https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html

source_url

https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html

id: 2455
uid: d6f7e
insdate: 2026-08-08 08:10:05
title: Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
additional: Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day.

The vulnerability (CVSS score: 10.0), which does not carry a CVE identifier, allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, enabling them to gain
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html
source_url: https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 2 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec