CVE-2026-72900

No fix known EPSS <1%CVSS 6.5

Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.

Published 2026-08-10 · CVE record · OSV

Products: metabase