Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.

According to its self-reported version number, the version of Metabase running on the remote host is 58.x prior to 58.24, or 59.x prior to 59.21, or 60.x prior to 60.17, or 61.x prior to 61.11, or 62.x prior to 62.9, or 63.x prior to 63.5. It is, therefore, affected by a SQL injection vulnerability.

An unauthenticated, remote attacker can inject arbitrary SQL into the Metabase application database through the /api/session/reset_password endpoint, which can grant them administrator access to the instance. From there, the attacker could change the application configuration, steal stored credentials for the connected databases, read any data accessible through those connections, and export data. The vendor has confirmed active exploitation of this vulnerability. (CVE-2026-72898)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Metabase installed on the remote host is 0.58.x prior to 0.58.24, 0.59.x prior to 0.59.21, 0.60.x prior to 0.60.17, 0.61.x prior to 0.61.11, 0.62.x prior to 0.62.9, 0.63.x prior to 0.63.5, 1.58.x prior to 1.58.24, 1.59.x prior to 1.59.21, 1.60.x prior to 1.60.17, 1.61.x prior to 1.61.11, 1.62.x prior to 1.62.9, or 1.63.x prior to 1.63.5. It is, therefore, affected by multiple vulnerabilities:

  - A remote, unauthenticated attacker can inject arbitrary SQL via the '/reset_password' database endpoint and gain     administrator access to the connected Metabase instance. (CVE-2026-72898)

  - An unauthenticated attacker can inject arbitrary SQL via a publicly shared card or dashboard that exposes a     field-filter (dimension) parameter. (CVE-2026-72899)

  - An authenticated, low-privileged attacker can read the entire Metabase application database. (CVE-2026-72900)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115429	Metabase Enterprise 1.58.x < 1.58.24 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115428	Metabase 0.58.x < 0.58.24 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115427	Metabase Enterprise 1.59.x < 1.59.21 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115426	Metabase 0.59.x < 0.59.21 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115425	Metabase Enterprise 1.60.x < 1.60.17 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115424	Metabase 0.60.x < 0.60.17 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115423	Metabase Enterprise 1.61.x < 1.61.11 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115422	Metabase 0.61.x < 0.61.11 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115421	Metabase Enterprise 1.62.x < 1.62.9 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115420	Metabase 0.62.x < 0.62.9 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115419	Metabase Enterprise 1.63.x < 1.63.5 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
115418	Metabase 0.63.x < 0.63.5 SQL Injection	Web App Scanning	Component Vulnerability	Version Based	critical
334690	Metabase 0.58.x < 0.58.24 / 0.59.x < 0.59.21 / 0.60.x < 0.60.17 / 0.61.x < 0.61.11 / 0.62.x < 0.62.9 / 0.63.x < 0.63.5 / 1.58.x < 1.58.24 / 1.59.x < 1.59.21 / 1.60.x < 1.60.17 / 1.61.x < 1.61.11 / 1.62.x < 1.62.9 / 1.63.x < 1.63.5 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2026-72899

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical