Read the docs
TI-2026-71834 Aliases CVE-2026-103928

Arbitrary file read and write in Metabase via H2 built-in functions

Priority MEDIUM 48CWE-73Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Metabase versions from 1.55.0 before 1.58.16, from 1.59.0 before 1.59.13, from 1.60.0 before 1.60.9, from 1.61.0 before 1.61.4, and from 0.55.0 before 0.58.15.3, from 0.59.0 before 0.59.12.1, from 0.60.0 before 0.60.8.1, from 0.61.0 before 0.61.3.4 are affected. Native queries and actions against an H2 data source pass host-facing built-in functions such as FILE_READ through without restriction, a flaw classified as CWE-73. A user authorized to run native queries or actions can read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so this surface is exposed by default.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Description from the CNA

Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or actions can invoke FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA to read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so the vulnerable surface is exposed by default. This issue is fixed in versions 1.58.16, 1.59.13, 1.60.9, and 1.61.4.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00407 35th percentileScored 2026-11-07
Fix Fixed metabase (metabase): 1.58.16, 1.59.13, 1.60.9 +5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Metabasemetabase1.55.0 to before 1.58.16; 1.59.0 to before 1.59.13; 1.60.0 to before 1.60.9; 1.61.0 to before 1.61.4; 0.55.0 to before 0.58.15.3; 0.59.0 to before 0.59.12.1; 0.60.0 to before 0.60.8.1; 0.61.0 to before 0.61.3.41.58.16, 1.59.13, 1.60.9, 1.61.4, 0.58.15.3, 0.59.12.1, 0.60.8.1, 0.61.3.4Patch availableCNA
  • metabase VendorMetabase Affected 1.55.0 to before 1.58.16; 1.59.0 to before 1.59.13; 1.60.0 to before 1.60.9; 1.61.0 to before 1.61.4; 0.55.0 to before 0.58.15.3; 0.59.0 to before 0.59.12.1; 0.60.0 to before 0.60.8.1; 0.61.0 to before 0.61.3.4 Fixed in 1.58.16, 1.59.13, 1.60.9, 1.61.4, 0.58.15.3, 0.59.12.1, 0.60.8.1, 0.61.3.4 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:*——Metabase
  • cpe:2.3:a:metabase:metabase:*:*:*:*:*:*:*:* Versions — — ·Metabase

Remediation

Upgrade to Metabase 1.58.16, 1.59.13, 1.60.9 or 1.61.4, which fix this issue. The 0.x release lines are fixed in 0.58.15.3, 0.59.12.1, 0.60.8.1 and 0.61.3.4.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

  • Fix · CNA metabase (metabase) Fixed in 1.58.16, 1.59.13, 1.60.9, 1.61.4, 0.58.15.3, 0.59.12.1, 0.60.8.1, 0.61.3.4

Timeline

  1. 2026-10-13 Threatist record created from CVE-2026-103928
  2. 2026-10-13 CISA SSVC decision points changed

References

Other 10

  • TI-2026-51115 Metabase SQL injection via password reset endpoint KEVCVSS 4.0CRITICAL 10.0
  • TI-2021-18109 GeoJSON URL validation can expose server files and environment variables to unauthorized users KEVCVSS 3.1CRITICAL 10.0
  • TI-2023-20003 Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow… CVSS 3.1CRITICAL 9.8
  • TI-2026-62552 Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass CVSS 4.0MEDIUM 6.9
  • TI-2026-58915 Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API CVSS 4.0HIGH 7.1
  • TI-2022-08664 File system exposure in Metabase CVSS 3.1MEDIUM 5.9
See all 33 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences