Which versions of Metabase are affected by CVE-2026-72899?

Metabase instances with publicly shared dashboards or cards are vulnerable to direct, unauthenticated database compromise through a critical SQL injection vulnerability.

How to fix or mitigate CVE-2026-72899?

Within 24 hours: disable public sharing in all Metabase instances and audit all previously shared cards or dashboards for field-filter parameters. Within 7 days: query access logs of all connected databases for unauthorized or suspicious SQL activity indicating exploitation attempts. Within 30 days: monitor vendor security advisories for patch availability, prepare an expedited upgrade plan once released, and implement network controls to restrict Metabase server connections to the database layer where operationally feasible.

Metabase CVE-2026-72899

Q: What is the CVSS score of CVE-2026-72899?

CVE-2026-72899 has a CVSS 4.0 base score of 10.0 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.6%.

EUVD-2026-55691 CRITICAL

SQL Injection (CWE-89)

2026-08-10 cisa-cg

SQLi Metabase

10.0

CVSS 4.0 · Vendor: cisa-cg

Severity by source

Vendor (cisa-cg) PRIMARY

10.0 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

10.0 CRITICAL

Unauthenticated network SQLi with no user interaction (PR:N/UI:N/AV:N/AC:L); injection reaches the backend database beyond Metabase's security scope (S:C) with full read/write/availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (cisa-cg).

CVSS VectorVendor: cisa-cg

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 10, 2026 - 18:36 vuln.today

CVE Published

Aug 10, 2026 - 17:56 cve.org

CRITICAL 10.0

DescriptionCVE.org

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.

AnalysisAI

SQL injection in Metabase lets an unauthenticated remote attacker execute arbitrary SQL against the connected database by abusing a field-filter (dimension) parameter exposed through a publicly shared card or dashboard. Because public sharing requires no login, any internet-reachable Metabase instance with a shared object that surfaces a field-filter parameter is exploitable with a single crafted request. No public exploit has been identified at time of analysis, but the maximal CVSS 4.0 score of 10.0 (AV:N/AC:L/PR:N/UI:N, full C/I/A on both the target and subsequent systems) reflects direct, unauthenticated database compromise.

Technical ContextAI

Metabase is an open-source business-intelligence and analytics platform that connects to backend SQL data sources (PostgreSQL, MySQL, SQL Server, etc.) and lets users build 'questions' (cards) and dashboards, optionally publishing them via public sharing links. Field filters (dimension parameters) map a dashboard/card parameter directly onto a database column so users can filter results interactively. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command): input supplied to a field-filter/dimension parameter on a publicly shared object is not properly parameterized or sanitized before being incorporated into the generated SQL, allowing attacker-controlled fragments to alter the query. The affected component per CPE is cpe:2.3:a:metabase:metabase (all versions until the fixed release), and exploitation occurs through the normal public-sharing HTTP endpoints rather than any authenticated admin API.

RemediationAI

Patch available per vendor advisory: upgrade to the fixed Metabase release identified in the GitHub Security Advisory GHSA-r8h2-qpfx-mx59 (https://github.com/metabase/metabase/security/advisories/GHSA-r8h2-qpfx-mx59); the exact fixed version is not stated in the provided data, so confirm it against that advisory before deploying. As an immediate compensating control until patched, disable public sharing entirely (Admin > Settings > Public Sharing), which stops the unauthenticated attack path at the cost of breaking any legitimately shared public links; alternatively, unpublish or delete only the specific shared cards and dashboards that expose field-filter/dimension parameters if some public links must remain. Additionally, place the Metabase instance behind authentication/VPN or restrict network access to the public-sharing endpoints so they are not internet-reachable, and enforce least-privilege on the database service account Metabase uses (read-only where possible) to limit the blast radius of any successful injection. Review database and Metabase access logs for anomalous queries against shared objects, and consult the CISA CSAF advisory (va-26-222-01) for any additional guidance.