CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability

news

Offensive Security

August 25th, 2026 at 11:30 AM

CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability

CVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it. The post CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability appeared first on OffSec .

Open source

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.05

Engagement proxy: 0

Canonical link: https://www.offsec.com/blog/cve-2026-72898/