Loading vulnerability…
CVE-2026-72898 is a critical unauthenticated SQL injection vulnerability in Metabase affecting the password reset workflow exposed through the session reset-password API endpoint. In affected self-hosted releases, a remote attacker with HTTP(S) access can submit crafted input to the reset-password endpoint and cause arbitrary SQL to be executed against Metabase’s internal application database before authentication is successfully established. Public technical reporting indicates the flaw is tied to improper handling of unexpected request fields in the reset flow, allowing attacker-controlled structured input to reach the query-building layer unsafely. Successful exploitation can bypass normal security controls and result in takeover of a Metabase administrator context. Because Metabase commonly stores configuration and credentials for connected databases and warehouses, compromise of the application database can extend beyond the Metabase instance itself.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
2 valid exploits after Mallory filtered fakes, detection scripts, and README-only repos (4 hidden).
Repository contains two files: a README and a single Python exploit script, cve-2026-72898_poc.py. The script is a standalone operational PoC for CVE-2026-72898, an unauthenticated SQL injection in Metabase's password-reset workflow. It is not part of a larger exploit framework. Exploit flow is three-step: (1) GET the target root path / and require HTTP 200, (2) POST crafted JSON to /api/session/reset_password with a malicious user-id.select.raw value containing SQL that inserts a forged admin session row into core_session using a generated UUID and its SHA-256 hash, and (3) send the forged session via X-Metabase-Session to /api/user/current to verify administrator access. If the final request returns HTTP 200 with JSON, the script marks the target vulnerable and prints the forged session ID and admin email. The exploit's main capability is admin takeover without credentials. It does not deploy a shell or arbitrary post-exploitation payload; instead it creates an authenticated Metabase superuser session that can be reused in the browser through the metabase.SESSION cookie. The README documents both single-target and mass-target usage, expected response patterns, and manual browser steps for converting the forged session into full UI access. Code structure is simple: helper functions for colored output, session creation, SQLi body construction, target checking, and CLI parsing. It supports reading targets from a file, configurable timeout, and optional TSV output. The payload is hardcoded and purpose-built for session forgery, making the repository an operational exploit rather than a mere detector.
This repository is a minimal proof-of-concept exploit consisting of a short README and a single Bash script, poc.sh. The script uses curl to send an HTTP POST request to a local web application's password reset endpoint at /api/session/reset_password. The JSON body includes a token, a replacement password, and a nested user-id.raw field containing the SQL injection string "1) OR 1=1 -- ". The apparent goal is to exploit insufficient input sanitization in backend password reset logic, likely causing the reset operation to match unintended users or bypass intended constraints. The exploit is operational but basic: it contains a hardcoded target URL, hardcoded password, and hardcoded injection payload, with no automation, validation, or framework integration. The README provides no meaningful technical guidance.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
72 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A critical SQL injection vulnerability in Metabase, described as a zero-day, that allows unauthenticated attackers to gain administrator access and exfiltrate sensitive data.
A critical SQL injection vulnerability in Metabase that allows a remote unauthenticated attacker to inject arbitrary SQL through the /reset_password database endpoint and gain administrator access.
A critical SQL injection vulnerability in Metabase that allows unauthenticated attackers to inject arbitrary SQL into the application database, potentially leading to administrator access, theft of stored database credentials, and access to connected data sources.
A critical SQL injection vulnerability in Metabase that allows unauthenticated attackers to inject arbitrary SQL into the application database, potentially leading to administrator access, credential theft, and data exfiltration.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.