Metabase 0-Day Vulnerability Exploited in the Wild to Gain Admin Access

A critical zero-day SQL injection vulnerability in Metabase, an open-source business intelligence platform, has been exploited in the wild to gain unauthorized full administrator access. While Metabase Cloud customers were automatically patched, self-hosted instances remain vulnerable, leading to confirmed data breaches including customer personal information.

This Wire brief sits within Fusion42's coverage of Cybersecurity, Enterprise Software and Data Infrastructure.