Metabase Security Research

To Get This PoC - Join > https://t.me/thecodeb0ss

Proof-of-concept research for the recently disclosed Metabase SQL injection vulnerability.

Purpose

This repository is intended solely for vulnerability research, detection engineering, defensive testing, and educational purposes.

Scope

The PoC is designed for use against Metabase instances that you own or are explicitly authorized to test.

Do not use this project against systems without authorization.

Safety

This repository does not provide infrastructure for exploitation of third-party systems, credential theft, persistence, or automated scanning of the internet.

Researchers should use an isolated local Metabase installation or another explicitly authorized test environment.

References

See the relevant Metabase security advisory and public vulnerability report for technical background.

Responsible Use

The authors do not authorize unauthorized access, data extraction, or disruption of systems using this research.

https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html