METABASE SQL INJECTION ZERO-DAY EXPLOITED

The vulnerability allows attackers to execute arbitrary SQL queries against Metabase databases without authentication, exposing sensitive customer information stored within affected instances. Security researchers confirmed the exploit is being weaponized in targeted attacks against organizations using Metabase for data analytics and business intelligence. The attacks specifically target cloud-hosted and on-premises deployments. Framework and Tally disclosed breaches tied to the vulnerability, though the full scope of impacted users remains unclear. Both companies have begun notifying affected customers and implementing remediation steps. Metabase has not yet released a patch. Users are advised to isolate affected instances and monitor database activity for suspicious queries. The company is expected to release a security update addressing the vulnerability soon. The exploitation demonstrates the risks posed by unpatched analytics tools, which often contain sensitive business and customer data.