Metabase SQL Injection Zero-Day Exploited for Mass Data Exfiltration
A critical zero-day SQL injection (SQLi) vulnerability in the Metabase business intelligence platform has been actively exploited to facilitate mass data exfiltration. The vulnerability arises from insufficient input sanitization within the query engine, permitting unauthenticated or low-privileged attackers to bypass security filters and execute arbitrary SQL commands against the application's backend database. This flaw enables attackers to bypass authorization controls via specific API endpoints, leading to the compromise of sensitive customer PII, administrative credentials, and potentially all connected data sources. Immediate remediation through vendor-supplied patches is required to mitigate the risk of full database takeover and secondary lateral movement into integrated data environments.