← Back to Feed
Metabase SQLi zero-day exploited in customer data-theft attacks
August 7, 2026 · BleepingComputer · Severity: CRITICAL
This article details a critical SQL injection vulnerability in Metabase that was exploited in zero-day attacks. The attacks aimed to steal customer data, affecting systems like Framework and Tally.
Key Takeaways
- A critical Metabase SQL injection vulnerability was exploited in zero-day attacks.
- The attacks targeted customer instances for data theft.
- Known impacts include breaches of Framework and Tally systems.