EUVD-2026-42659Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with native-query rights
-
DeliverySubmit crafted native H2 query returning OTHER column
-
ExploitH2 result deserializes malicious Java object
-
ExecutionGadget chain executes on server
-
ImpactRCE as Metabase service account
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A08:2025 - Software or Data Integrity Failures
ASVS 5.0
V1 - Encoding and Sanitization Safe deserialization, type allowlists
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires an authenticated Metabase user (PR:L) who holds native-query / raw-SQL permission against a database served by the H2 engine - this includes the default bundled sample database present on most fresh installs, so the precondition is frequently met out of the box. The attacker must craft a native H2 query that returns a column of type OTHER (JDBC Types.JAVA_OBJECT) containing a serialized Java payload with a usable gadget on the Metabase classpath. Limiting factors: exploitation is impossible without native-query rights on an H2 connection, so deployments that disable native queries or use only non-H2 warehouses are not exploitable; no user interaction is required and it is network-reachable, but it is not unauthenticated. |
| Impact | Signals are consistent and point to a targeted rather than mass-exploited issue. CVSS 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects network reachability, low complexity, and total confidentiality/integrity/availability impact, but crucially requires PR:L - an authenticated user who already holds native-query rights against an H2 database. CISA SSVC rates exploitation 'none' and automatable 'no' with technical impact 'total', and EPSS is low at 0.45% (36th percentile), so this is not currently subject to widespread automated exploitation. The high CVSS is driven by total technical impact once the required native-query privilege is held, not by ease of unauthenticated access. Net: real and serious for any deployment that grants analysts native-query access to H2 (especially the default sample database), but the authentication and native-query prerequisites, plus the absence of confirmed active exploitation, make it a prompt-patch item rather than an emergency internet-facing worm risk. |
| Exploit ScenarioDerived | An analyst account - or a compromised low-privilege user - with permission to run native SQL against Metabase's H2 sample database submits a crafted native H2 query whose result set includes a column of type OTHER carrying a malicious serialized Java gadget. When Metabase materializes the result via .getObject, the JVM deserializes the object and executes the gadget chain as the Metabase service account. No public POC is identified at time of analysis, though the fix commit clearly documents the vulnerable code path. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv3 – Jul 13, 2026
Remote code execution in Metabase's H2 database driver allows an authenticated user with native-query privileges to run arbitrary Java on the server. When Metabase returns H2 result columns of type OTHER (JDBC JAVA_OBJECT), it deserializes the embedded Java object without validation, so a crafted native H2 query triggers CWE-502 unsafe deserialization and full server compromise. It affects any instance using an H2 connection, including the default bundled sample database. No public exploit is identified at time of analysis (SSVC exploitation: none; EPSS 0.45%), though the upstream fix commit and vendor advisory GHSA-w95f-x9v9-wv36 are public.
Earlier versions of this analysis (2)
Remote code execution in Metabase (open-source and Enterprise editions) lets an authenticated user with native-query privileges over an H2 connection execute arbitrary code on the server. Because Metabase ships a default H2 sample database, exploitable conditions can exist out-of-the-box; the flaw stems from unsafe Java deserialization of H2 result columns of type OTHER. No public exploit has been identified at time of analysis, EPSS is low (0.45%), and SSVC lists exploitation as none, but technical impact is rated total.
Remote code execution in Metabase business intelligence server allows an authenticated user with native-query privileges against an H2-connected database to run arbitrary code on the host. Because Metabase ships a default H2 'sample database', affected instances are exploitable out of the box wherever native queries are permitted. Rated CVSS 9.9 with a scope-changing vector; no public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
RemediationAI
Vendor-released patch: upgrade to Metabase 1.58.15, 1.59.12, 1.60.6.3, or 1.61.1.4 (community tags v0.58.15, v0.59.12, v0.60.6.3, v0.61.1.4), which reject H2 columns of type JAVA_OBJECT instead of deserializing them (fix commit 00f42511fe3bc4385652a2e96862ee6fd7d42cf8); see the advisory at https://github.com/metabase/metabase/security/advisories/GHSA-w95f-x9v9-wv36 and the corresponding GitHub release tags. If immediate patching is not possible, revoke native (raw SQL) query permissions on all H2-backed databases and, where feasible, remove or disconnect the bundled H2 sample database and any production H2 connections, migrating analytics to a non-H2 warehouse; the trade-off is that analysts lose native-query capability against those sources and the sample dataset becomes unavailable. Additionally restrict who holds data-editor/native-query roles, since exploitation depends on that privilege.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 4 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Metabase is a Clojure/Java open-source business intelligence platform. The flaw lives in the H2 JDBC driver integration (src/metabase/driver/h2.clj), which reads result-set columns via .getObject. H2 supports a native column type OTHER that maps to JDBC Types.JAVA_OBJECT and carries a serialized Java object; calling .getObject on such a column invokes Java native deserialization (ObjectInputStream) on attacker-influenced bytes. This is a textbook CWE-502 (Deserialization of Untrusted Data): the H2 engine performs the deserialization when the query result is materialized, so any gadget chain on the Metabase classpath can lead to code execution. The fix inspects .getColumnType and throws 'Unable to parse jdbc type' whenever the column type is Types/JAVA_OBJECT, refusing to deserialize OTHER columns entirely.
Know when Metabase gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable and low-complexity, but requires an authenticated user with native-query rights (PR:L); deserialization yields full RCE, so C/I/A all High with unchanged scope.
Primary rating from Vendor (github).
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns of type OTHER without validation, allowing an authenticated user who can run native H2 queries to execute code on the Metabase server. This issue is fixed in versions 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4.
Articles & Coverage 2
Executive ViewAI
Metabase deployments using H2 database connections face a remote code execution vulnerability (CVSS 8.8) that could allow database query access to escalate into full server compromise. The vulnerability impacts organizations with Metabase instances, particularly those using default configurations, and requires immediate patch deployment to mitigate insider threat and system takeover risk.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
Exploit-DB
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Insecure deserialization occurs when an application converts serialized data (a stream of bytes representing an object's state) back into a living object without proper validation.
Metabase is an open source data analytics platform. Rated high severity (CVSS 7.5), this vulnerability is remotely explo
SQL injection in Metabase's '/reset_password' database endpoint lets a remote, unauthenticated attacker inject arbitrary
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
Server-side request forgery in Metabase through 0.63.18 lets an attacker bypass GeoJSON URL validation by saving a custo
The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request For
SQL injection in Metabase lets an unauthenticated remote attacker execute arbitrary SQL against the connected database b
Metabase is an open-source business intelligence and analytics platform. Rated critical severity (CVSS 9.8), this vulner
Metabase is an open source business analytics engine. Rated critical severity (CVSS 9.6), this vulnerability is remotely
Arbitrary file read and write on the Metabase server is possible through H2-backed native queries and actions in Metabas
Metabase is an open source business intelligence and analytics application. Rated medium severity (CVSS 5.3), this vulne
Remote code execution in Metabase (open-source business intelligence platform) versions 1.54.0 through the fixed release
Remote code execution in Metabase (open-source BI/analytics platform) versions 1.55.0 through the fixed releases arises