---
id: 7632
title: "Metabase Cloud: The winner takes it all"
source_domain: hacktron.ai
source_url: "https://www.hacktron.ai/blog/metabase-cloud"
published_at: "2026-06-25T00:00:00Z"
tags: ["cloud", "rce", "cloud-security", "attack-chain", "sanitizer-bypass", "multi-tenant", "metabase-cloud", "h2-database"]
phying_url: "https://phying.com/item/7632"
lang: en
---

# Metabase Cloud: The winner takes it all

## Summary

We could have pwned every Metabase Cloud tenant by chaining an H2 INIT sanitizer bypass into RCE, then cloud misconfigurations into a full multi-tenant cluster compromise.

## Intelligence Metadata

- **Sources:** hacktron.ai
- **Published:** 2026-06-25T00:00:00Z
- **Original:** https://www.hacktron.ai/blog/metabase-cloud
- **Phying News:** https://phying.com/item/7632