CVE-2026-72900: Metabase

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.

Affected products

• Metabase Metabase

Published 2026-08-10. Last modified 2026-08-26.