Breach404
Back to Insights
Secure Software2 min readAugust 8, 2026

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

A critical vulnerability in Metabase allows attackers to gain full administrator access without needing any credentials, and this flaw is already being actively exploited in the wild. If your organization uses Metabase, you should immediately check for si

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free