Medium severity · published Sep 5, 2026
CVE-2026-86116
Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
Metabase versions before 0.63.1 fail to enforce data analyst permission checks on glossary API endpoints, allowing any authenticated user to create, modify, and delete glossary entries. Attackers can submit requests to POST, PUT, and DELETE glossary endpoints to tamper with instance-wide business glossary data without proper authorization.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
metabase · metabase
0.57.0 before 0.63.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-86116
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-86116
github.com
https://github.com/geo-chen/oss/blob/main/metabase.md
github.com
https://github.com/metabase/metabase
github.com
https://github.com/metabase/metabase/blob/v0.62.1/src/metabase/glossary/api.clj
github.com
https://github.com/metabase/metabase/commit/0a0589299cfd
github.com
https://github.com/metabase/metabase/releases/tag/v0.63.1
www.vulncheck.com
https://www.vulncheck.com/advisories/metabase-before-0.63.1-missing-function-level-authorization-on-the-glossary-management-api
More from metabase
10.0
CVE-2026-72898
Metabase SQL injection via password reset endpoint
7.5
CVE-2021-41277
GeoJSON URL validation can expose server files and environment variables to unauthorized users
10.0
CVE-2026-72899
Metabase SQL injection via public card or dashboard
9.8
CVE-2023-37470
Metabase is an open-source business intelligence and analytics platform
9.8
CVE-2023-38646
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level