Security Digest
Metabase: known exploited vulnerabilities
2 Metabase CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-08-11 | CVE-2026-72898 | Metabase Metabase Metabase SQL Injection Vulnerability | 2026-08-14 |
| 2024-11-12 | CVE-2021-41277 | Metabase Metabase Metabase GeoJSON API Local File Inclusion Vulnerability | 2024-12-03 |