Login Request a demo
ME
Product
metabase
by metabase · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
31
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities31In the news2Timeline
Severity mix
Critical 8High 9Medium 14Low 0
Severity
All severities31Critical8High9Medium14Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add metabase to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-41277
In wildKEV
7.5
97%
Nov 17
GeoJSON URL validation can expose server files and environment variables to unauthorized users
Affected: < 0.40.5; >= 1.0.0, < 1.40.5
CVE-2026-59827
8.8
4%
Jul 9
Metabase: Unsafe Deserialization of H2 Query Results
Affected: >= 1.58.0, < 1.58.15; >= 1.59.0, < 1.59.12; >= 1.60.0, < 1.60.6.3; >= 1.61.0, < 1.61.1.4
CVE-2022-39361
8.8
1%
Oct 26
Metabase vulnerable to Remote Code Execution via H2
Affected: < 0.41.9; >= 0.42.0, < 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.41.9; >= 1.42.0, < 1.42.6; +2 more
CVE-2022-39362
8.8
1%
Oct 26
Metabase vulnerable to arbitrary SQL execution from queryhash
Affected: < 0.41.9; >= 0.42.0, < 0.42.6; >= 0.43.0, < 0.43.7; >= 0.44.0, < 0.44.5; >= 1.0.0, < 1.41.9; >= 1.42.0, < 1.42.6; +2 more
CVE-2022-24854
8.8
1%
Apr 14
Metabase is an open source business intelligence and analytics application
Affected: 0.41.0 before 0.41.7; 0.42.0 before 0.42.4; 1.41.0 before 1.41.7; 1.42.0 before 1.42.4
CVE-2026-22805
8.6
0%
Jan 12
Metabase is an open-source data analytics platform
Affected: before 0.55.13; before 1.55.13; 0.56.0 before 0.56.3; 1.56.0 before 1.56.3; 0.57.0; 1.57.0
CVE-2026-50147
7.6
0%
Jul 15
Metabase: Arbitrary File Read via MySQL Connection Property Injection
Affected: >= 1.57.0, < 1.57.19.1; >= 1.58.0, < 1.58.14.1; >= 1.59.0, < 1.59.10; >= 1.60.0, < 1.60.4
CVE-2025-5895
7.5
1%
Jun 9
A vulnerability was found in Metabase 54.10
Affected: 0.54.10
CVE-2026-33725
7.2
1%
Mar 27
Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
Affected: < 1.54.22; >= 1.55.0, < 1.55.22; >= 1.56.0, < 1.56.22; >= 1.57.0, < 1.57.16; >= 1.58.0, < 1.58.10; >= 1.59.0, < 1.59.4
Showing 9