Metabase announces security update for 0-day vulnerability
Attackers exploited an unknown vulnerability in versions 1.58 and above; self-hosted instances should upgrade immediately and revoke active sessions.
See the latest news and media coverage for Metabase. We track all announcements, press releases, and industry mentions in real time, all in one place.
Open-source AI-powered business intelligence and embedded analytics platform
metabase.comLast updated
In short: Metabase suffered a zero-day SQL injection breach exposing customer data, prompting fixes and lawsuits.
Attackers exploited an unknown vulnerability in versions 1.58 and above; self-hosted instances should upgrade immediately and revoke active sessions.
It adds treemap charts, two-factor authentication, PDF subscriptions, and support for more LLM providers for Metabot.
It also released MCP server, Metabot in Slack, Data Studio, and more, calling it an interim report.
The update includes MCP server charts, CLI for terminal management, an interactive Schema Viewer, and library organization.
A critical cybersecurity breach involving Metabase, the widely used business intelligence and analytics platform, has exposed ...
RCE in Metabase (CVE-2023-38646) enables root privilege escalation via unshare overlay mount.
Open-source AI analytics company Metabase Inc. and pediatric telehealth provider Blueberry Medical failed to protect patients' personal health information from being exposed during a cybersecurity...
Disclosed and patched by the developer on August 6, a major vulnerability in the Metabase data visualization application was exploited by hackers, on...
Track Metabase and your other target companies to get real-time alerts and weekly summaries delivered straight to your inbox.
Browse news for competitors to Metabase and other trending companies.