---
id: 6371
title: "Security update available for Metabase - Please upgrade now"
source_domain: metabase.com
source_url: "https://www.metabase.com/blog/security-update"
published_at: "2026-08-06T00:00:00Z"
tags: ["cloud", "zero-day", "sql-injection", "metabase", "self-hosted", "security-advisory", "upgrade"]
phying_url: "https://phying.com/item/6371"
lang: en
---

# Security update available for Metabase - Please upgrade now

## Summary

Metabase patched a 0-day in versions 1.58+ exploited against its Cloud: the reset_password endpoint allowed SQL injection, admin takeover and credential theft — self-hosted users must upgrade.

## Intelligence Metadata

- **Sources:** metabase.com
- **Published:** 2026-08-06T00:00:00Z
- **Original:** https://www.metabase.com/blog/security-update
- **Phying News:** https://phying.com/item/6371