Skip to content
archivevulnerability · 07 Aug 2026 · 20:14 UTC

Metabase SQLi zero-day exploited in customer data-theft attacks

last 60 dispatches · spectrum

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected