PT-2026-2314 · Metabase · Metabase

Lowimrk · Publicado 2026-01-12 · Atualizado 2026-04-10 · CVE-2026-22805

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Metabase versions prior to 55.13 Metabase versions prior to 56.3 Metabase versions prior to 57.1

Description Metabase is an open-source data analytics platform. Self-hosted instances allowing user-created subscriptions may be potentially impacted if colocated with other unsecured resources.

Recommendations Update to Metabase version 55.13 or later. Update to Metabase version 56.3 or later. Update to Metabase version 57.1 or later.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-22805

GHSA-2WGG-7R2P-CMQX

Produtos afetados

Metabase

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22805.json · Exploit
• https://github.com/metabase/metabase/security/advisories/GHSA-2wgg-7r2p-cmqx · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2010878523376882053 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22805 · Nota de Segurança
• https://twitter.com/CVEnew/status/2010847682974171274 · Publicação no Twitter
• https://twitter.com/giuseppe_1337/status/2042625059374714894 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-22805 · Aviso do Fabricante