PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security update available for Metabase - Please upgrade now

metabase.com | blog | #ai-security | #cloud | #information-disclosure | #vulnerability | #metabase | #patching | #security-update | #database-credentials | #metabase-com
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Metabase patched an info-leak flaw that lets authenticated users, including embedding users, retrieve database credentials. Self-hosted instances must upgrade now; Metabase Cloud is already patched.
Published
Collected

Related coverage

blog · metabase.com
Security update available for Metabase - Please upgrade now
Metabase reveals a patched 0-day exploited on Cloud in versions 1.58+: attackers could inject SQL into the app database for admin access and credential theft; self-hosted users should upgrade now.
blog · metabase.com
Security update available for Metabase - Please upgrade now
Metabase patched a 0-day in versions 1.58+ exploited against its Cloud: the reset_password endpoint allowed SQL injection, admin takeover and credential theft — self-hosted users must upgrade.
blog · metabase.com
'Wait, you don't have a semantic layer yet?' AI analytics readiness pulse
We asked 73 data people about AI Analytics: 59% are already using AI with their data, 44% want it all self-hosted, and 31% of poll voters don’t know what a semantic layer is. A small, unscientific snapshot from AI Analytics Week.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · crowdstrike.com
CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
Falcon Adversary OverWatch now includes 24/7 managed hunting for AI applications and autonomous agent activity, and deeper, telemetry-driven hunting for Google Cloud.
Back