CVE-2026-72899 UNKNOWN

CVE-2026-72899

Published: 2026-08-10

Description

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…