Maximum-Severity Metabase Zero-Day Exploited to Steal Database Credentials

Metabase warns a maximum-severity zero-day vulnerability is actively exploited in the wild. Attackers exploit an unauthenticated SQL injection to gain full administrator access to Metabase instances. The flaw lets threat actors alter configurations, steal connected database credentials, and export data. PC maker Framework confirms hackers accessed customer names, addresses, and emails via the exploit, though they didn't touch payment data. Cloud instances are patched, but self-hosted users must update immediately or block password reset endpoints. "If you find that pattern in your application logs or in your Metabase server ingress logs, it is likely that your instance has been compromised." — Sameer Al-Sakran Business intelligence tools hold the keys to every production database you own, making them the most dangerous shadow infrastructure in the modern enterprise.