ShinyHunters claims Metabase breach after zero-day hit

Business intelligence platform Metabase disclosed on August 6 that attackers exploited a zero-day SQL injection vulnerability to breach Metabase Cloud, gaining raw access to application databases and potentially exposing stored credentials, API keys, and connected data warehouse contents. The flaw, now designated CVE-2026-72898, carries the maximum CVSS score of 10.0 and has been added to CISA's Known Exploited Vulnerabilities catalog with a remediation deadline of August 14.runzero+1

Hacking group ShinyHunters claimed responsibility for the attack days after the disclosure, according to Cybernews, which reported the group listed Metabase on its leak site.cybernews

How the Attack Works

The vulnerability resides in Metabase's password-reset endpoint, `/api/session/reset_password`. A remote, unauthenticated attacker can inject arbitrary SQL through a crafted request, requiring no credentials and no user interaction. Successful exploitation grants administrator access to the Metabase instance, from which an attacker can alter configurations, steal stored database credentials, read or export any connected data, and create rogue admin accounts.csoonline+3

"This vulnerability allows attackers to have unmitigated, raw SQL access to the Metabase database," said Scott Miserendino, CTO at DataBee. He warned that organizations using products with embedded OEM versions of Metabase may not realize they are exposed.csoonline

Security firm Wiz reported that approximately 13% of cloud environments have deployed self-hosted Metabase instances, with about 25% of those fully accessible on the internet. Search engine Shodan has tracked roughly 2,500 exposed instances.csoonline

Known Victims and Fallout

Confirmed victims so far include laptop manufacturer Framework, Y Combinator-backed accounting startup Tally, Kilo Code (recently acquired by Anaconda), workflow automation platform n8n, and AI monitoring provider ChecklyHQ. Exposed data across these companies includes usernames, email addresses, cloud passwords, cryptographic hashes of API keys, and Slack access tokens.helpnetsecurity+1

"The vulnerability was in a vendor's product, but protecting your data is our job, and this incident put some of it at risk," Checkly said in its customer notice. The company acknowledged that its analytics environment "held more sensitive data and had broader access than it needed".csoonline

Patching and Mitigation

Metabase Cloud customers have been automatically patched. Self-hosted deployments running versions 0.58 through 0.63 remain vulnerable unless upgraded to the latest fixed releases — 0.58.24, 0.59.21, 0.60.17, 0.61.11, 0.62.9, or 0.63.5. Organizations unable to patch immediately should block the `/api/session/reset_password` endpoint as a temporary workaround.securityweek+1

"You don't see a perfect 10/10 on CVSS often, but when you do, be worried," said David Shipley, CEO of Beauceron Security. "SQL injection is old school and painful, as there's now working proof of concept exploit code".csoonline