← Back to Feed
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
August 10, 2026 · Dark Reading · Severity: CRITICAL
A maximum-severity SQL zero-day vulnerability in Metabase allows remote administrator access to the business-analytics platform. The flaw, which still lacks a CVE, could have a wide blast radius affecting downstream users.
Key Takeaways
- Maximum-severity Metabase SQL zero-day vulnerability allows remote admin access.
- The flaw has no CVE yet and could impact many downstream users.
- Attacks exploit the vulnerability to gain malicious administrator control.