[EN] CVE-2026-33725: Technical Analysis and Proof of Concept

CVE

CVE-2026-33725

Published

2026-05-05 19:51

Collected

2026-10-17 01:32

---
id: 9169
title: "[EN] CVE-2026-33725: Technical Analysis and Proof of Concept"
cve: CVE-2026-33725
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/en-cve-2026-33725-technical-analysis-and-proof-of-concept/"
published_at: "2026-05-05T19:51:24Z"
tags: ["ai-security", "rce", "vulnerability-research", "research"]
phying_url: "https://phying.com/item/9169"
lang: en
---

# [EN] CVE-2026-33725: Technical Analysis and Proof of Concept

## Summary

On March 24, 2026, a high-criticality vulnerability was identified in Metabase Enterprise leading to remote command execution, discovered by “Hacktron AI and Rahul Maini,” as credited here. The flaw was cataloged under the identifier “CVE-2026-33725“. The vulnerability allows an authenticated administrator on the platform to inject arbitrary parameters into the JDBC connection URL through a […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2026-33725
- **Published:** 2026-05-05T19:51:24Z
- **Original:** https://yokai.hakaisecurity.io/en-cve-2026-33725-technical-analysis-and-proof-of-concept/
- **Phying News:** https://phying.com/item/9169