Metabase

Metabase known exploited vulnerabilities

Every Metabase vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first.

2 CVEs

CVE-2026-72898Metabase SQL Injection Vulnerability · added August 11, 2026
CVE-2021-41277Metabase GeoJSON API Local File Inclusion Vulnerability · added November 12, 2024

Source: CISA Known Exploited Vulnerabilities Catalog (public domain).