23 exploited vulnerabilities in Metabase

Vulnerabilities with publicly known exploits

Vendors: Metabase, H2, Sqlite
With known exploits: 23
Affected Metabase versions: < 0.43.7.2, 1.43.7.2, 0.44.7.1, 0.45.4.1, 0.46.6.1, 1.44.7.1, 1.45.4.1, 1.46.6.1, 0.40.0, 0.40.1, 0.40.2, 0.40.3, 0.40.4, 1.40.0, 1.40.1, 1.40.2, 1.40.3, 1.40.4, 0.58.15, 0.59.12, 0.60.6.3, 0.61.1.4, 1.58.15, 1.59.12, 1.60.6.3, 1.61.1.4, 1.58.15.1, 1.61.2, 0.41.9, 0.42.6, 0.43.7, 0.44.5, 1.41.9, 1.42.6, 1.43.7, 1.44.5, 0.40.8, 0.41.7, 0.42.4, 1.40.8, 1.41.7, 1.42.4

CVE-2023-38646 37 exploits

CVSS 10.0 CRITICAL 2023-07-21FIX AVAILABLE

Exploit for CVE-2023-38646 Exploit for CVE-2023-38646

CVSS 10.0 CRITICAL 2023-08-04FIX AVAILABLE

CVE-2021-41277 5 exploits

CVSS 10.0 CRITICAL 2021-11-17FIX AVAILABLE

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase

CVE-2026-59827 2 exploits

CVSS 9.9 CRITICAL 2026-05-16FIX AVAILABLE

Exploit for Deserialization of Untrusted Data in Metabase Exploit for Deserialization of Untrusted Data in Metabase

CVE-2026-59826 1 exploit

CVSS 9.1 CRITICAL 2026-07-09FIX AVAILABLE

Exploit for Deserialization of Untrusted Data in Metabase

CVSS 8.8 HIGH 2022-10-26FIX AVAILABLE

CVSS 8.8 HIGH 2022-10-26FIX AVAILABLE

CVSS 8.7 HIGH 2022-04-14FIX AVAILABLE

CVSS 8.6 HIGH 2026-01-12FIX AVAILABLE

CVSS 8.0 HIGH 2022-04-14FIX AVAILABLE

CVSS 7.7 HIGH 2026-02-21FIX AVAILABLE

CVSS 7.5 HIGH 2025-06-09FIX AVAILABLE

CVSS 6.5 MEDIUM 2022-10-26FIX AVAILABLE

CVSS 6.5 MEDIUM 2022-10-26FIX AVAILABLE

CVSS 6.5 MEDIUM 2022-10-26FIX AVAILABLE

CVSS 6.5 MEDIUM 2022-10-26FIX AVAILABLE

CVSS 6.3 MEDIUM 2023-01-28FIX AVAILABLE

CVSS 5.9 MEDIUM 2022-04-14FIX AVAILABLE

CVSS 5.8 MEDIUM 2023-05-18FIX AVAILABLE

CVSS 5.7 MEDIUM 2023-01-28FIX AVAILABLE

CVSS 4.8 MEDIUM 2024-12-16FIX AVAILABLE

CVSS 2.1 LOW 2025-03-28FIX AVAILABLE

CVSS 1.8 LOW 2025-04-10FIX AVAILABLE