[CVE-2026-72898] Inside the Metabase SQLi: Exploited in the Wild

CVE

CVE-2026-72898

Published

2026-08-10 12:30

Collected

2026-08-29 00:49

---
id: 6775
title: "[CVE-2026-72898] Inside the Metabase SQLi: Exploited in the Wild"
cve: CVE-2026-72898
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild"
published_at: "2026-08-10T12:30:17Z"
tags: ["ai-security", "cloud", "sql-injection", "reverse-engineering", "metabase", "exploited-in-the-wild", "cve-2026-72898", "wiz"]
phying_url: "https://phying.com/item/6775"
lang: en
---

# [CVE-2026-72898] Inside the Metabase SQLi: Exploited in the Wild

## Summary

Wiz reverse-engineers CVE-2026-72898, the Metabase SQLi exploited in the wild via /api/session/reset_password since the Aug 6 incident; about 13% of cloud environments self-host Metabase.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2026-72898
- **Published:** 2026-08-10T12:30:17Z
- **Original:** https://www.wiz.io/blog/inside-the-metabase-sqli-exploited-in-the-wild
- **Phying News:** https://phying.com/item/6775