Breach404
Back to Insights
Secure Software2 min readAugust 7, 2026

Metabase SQLi zero-day exploited in customer data-theft attacks

Attackers are actively exploiting a critical SQL injection vulnerability in Metabase to breach customer instances and steal data, with confirmed attacks affecting companies like Framework and Tally. If your organization uses Metabase, you should immediate

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free