Latest Metabase News & Updates

See the latest news and media coverage for Metabase. We track all announcements, press releases, and industry mentions in real time, all in one place.

Metabase

Open-source business intelligence and embedded analytics platform

metabase.com

Founded year: 2014
Company type: Private company
Number of employees: 125–200
Industry: Software

Last updated Today

Latest news about Metabase

In short: Metabase patched a critical zero-day SQL injection vulnerability after it was exploited to breach customer data at several organizations.

Company announcements

August 6 Metabase

Metabase announces security update for 0-day vulnerability

Attackers exploited an unknown vulnerability in versions 1.58 and above; self-hosted instances should upgrade immediately and revoke active sessions.

July 21 Metabase

Metabase releases v63 with treemaps, 2FA, and more

It adds treemap charts, two-factor authentication, PDF subscriptions, and support for more LLM providers for Metabot.

July 6 Metabase

Metabase shipped AI features across all plans

It also released MCP server, Metabot in Slack, Data Studio, and more, calling it an interim report.

June 16 Metabase

Metabase released version 62 with custom visualizations and CLI

The update includes MCP server charts, CLI for terminal management, an interactive Schema Viewer, and library organization.

Media coverage

September 7 iTnews

Late patching of Metabase SQLi bug claims Sydney's Mathspace

Attackers exploited a critical Metabase vulnerability to breach Mathspace after the company failed to patch its self-hosted ...

August 25 OffSec

CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability

CVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it.

August 12 CSO

Metabase SQLi exploit grants attackers total access

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

August 10 ITECH POST

Framework Admits Customer Data Were Exposed in Latest Security Breach—Is Metabase Cloud The Cause?

Metabase CEO Sameer Al-Sakran wrote in a company blog post that the flaw was an unauthenticated SQL injection vulnerability that could ultimately give a remote...

Never miss news about Metabase

Track Metabase and your other target companies to get real-time alerts and weekly summaries delivered straight to your inbox.

Metabase competitors & trending companies

Browse news for competitors to Metabase and other trending companies.