Reported by 1 outlet
Metabase SQLi Zero-Day Exploited in Customer Data-Theft Attacks
hot0.0
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Metabase SQLi Zero-Day Exploited in Customer Data-Theft Attacks
bleepingcomputer.com · 67d ago · August 8th, 2026
Attackers weaponized a previously unknown SQL injection vulnerability in Metabase versions 1.58 and above to breach Metabase Cloud and steal customer data, with laptop maker Framework and accounting firm Tally confirmed as victims. Metabase blocked the endpoints used in the attacks and rolled out a fix, but warns self-hosted installations are equally exposed. Treat any Metabase deployment as potentially compromised and audit for anomalous query activity.