Metabase disclosed a zero-day SQL injection vulnerability, CVE-2026-72898, rated a critical 10, that lets attackers gain unrestricted SQL access to Metabase databases and potentially expose credentials, tokens, API keys, and other sensitive data. The flaw affects Metabase versions 1.58 and later, exploiting the /api/session/reset_password endpoint. Metabase blocked the abused endpoints, patched its cloud service, terminated sessions, revoked credentials, and urged self-hosted users to upgrade or block the vulnerable route. Victims include smaller firms such as Kilo Code, Tally, Framework, n8n, and ChecklyHQ, reporting theft of usernames, emails, passwords, and Slack tokens. Organizations are rotating credentials, auditing logs, and tightening analytics environments to reduce future exposure.
This update represents a notable development in the Ai sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.