Which versions of Metabase are affected by CVE-2026-72898?

A CRITICAL vulnerability in Metabase enables remote, unauthenticated attackers to bypass authentication and gain full administrative control over analytics platforms and connected data sources; no…

Is there a public PoC exploit available for CVE-2026-72898?

Yes, a public proof-of-concept exploit is available for CVE-2026-72898. Prioritise patching immediately. EPSS: 0.7%.

How to fix or mitigate CVE-2026-72898?

Within 24 hours: Isolate Metabase instances from network access or, if isolation is infeasible, implement emergency access controls restricting connectivity to management endpoints only. Within 7 days: Review CISA advisory VA-26-222-01 and vendor advisory GHSA-vwf4-m7j8-wcjf to determine your affected Metabase versions; examine authentication and audit logs for unauthorized administrative account creation and suspicious SQL operations. Within 30 days: Monitor vendor and CISA channels for patch availability; upon release, prioritize deployment of the patch to all Metabase instances and verify post-deployment that no unauthorized administrative access was established.

Metabase CVE-2026-72898

Q: What is the CVSS score of CVE-2026-72898?

CVE-2026-72898 has a CVSS 4.0 base score of 10.0 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.7%.

EUVD-2026-55690 CRITICAL

SQL Injection (CWE-89)

2026-08-10 cisa-cg

SQLi Metabase

10.0

CVSS 4.0 · Vendor: cisa-cg

Severity by source

Vendor (cisa-cg) PRIMARY

10.0 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

10.0 CRITICAL

Remote unauthenticated SQLi with no user interaction (AV:N/AC:L/PR:N/UI:N); admin takeover compromising connected databases justifies S:C and C/I/A:H.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (cisa-cg).

CVSS VectorVendor: cisa-cg

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Threat Model Generated

Aug 30, 2026 - 20:00 vuln.today

Added to CISA KEV

Aug 11, 2026 - 19:49 CISA

Analysis Generated

Aug 10, 2026 - 18:35 vuln.today

CVE Published

Aug 10, 2026 - 17:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

Articles & Coverage 2

POC CVE-2026-72898: Metabase Unauthenticated SQL Injection via Password-Reset Endpoint Enables Full Admin Takeover (CVSS 10.0) Aug 13, 2026 wiz.io Metabase SQL Injection CVE-2026-72898: Reverse Engineering and Active Exploitation Analysis Aug 10, 2026

AnalysisAI

SQL injection in Metabase's '/reset_password' database endpoint lets a remote, unauthenticated attacker inject arbitrary SQL and escalate to administrator on the connected Metabase instance. Rated CVSS 4.0 10.0 (CWE-89), it is network-exploitable with no authentication or user interaction, and full compromise of the application and its subsequent systems is achievable. No public exploit code is identified at time of analysis, but a vendor security advisory (GHSA-vwf4-m7j8-wcjf) and a CISA CSAF advisory (VA-26-222-01) both track the flaw, indicating coordinated, high-priority disclosure.

Technical ContextAI

Metabase is a widely used open-source business-intelligence and analytics application (Java/Clojure backend) that connects to backend databases and exposes an HTTP API. The affected surface is the '/reset_password' database endpoint, where attacker-controlled input is concatenated into a SQL query without proper parameterization or sanitization - the classic CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) root cause. Because Metabase's authentication and privilege state are stored in the same backend it queries, an injection here can be leveraged to manipulate account/session data and grant administrator access rather than merely reading arbitrary rows. The CPE cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:* indicates the base Metabase product is affected across versions, with the exact fixed range defined in the vendor advisory.

RemediationAI

Patch available per vendor advisory: upgrade Metabase to the fixed release specified in GHSA-vwf4-m7j8-wcjf and the Metabase security update post (https://www.metabase.com/blog/security-update); the exact fixed version was not included in this input and must be read from those advisories rather than assumed. Until patching is complete, restrict network exposure of the Metabase web interface by placing it behind a VPN or IP allowlist and blocking direct internet access to the '/reset_password' endpoint at a reverse proxy or WAF (trade-off: WAF rules can be bypassed by injection encoding and may break legitimate password-reset flows, so treat this as temporary only). Additionally, rotate the credentials of any database accounts Metabase uses and review admin accounts and audit logs for unauthorized changes, since a successful attack yields administrator access; consult the CISA CSAF advisory (va-26-222-01) for vendor-aligned guidance.