{"id":242376,"date":"2026-08-08T02:13:47","date_gmt":"2026-08-08T07:13:47","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/08\/metabase-sqli-zero-day-exploited-in-customer-data-theft-attacks"},"modified":"2026-08-08T02:13:47","modified_gmt":"2026-08-08T07:13:47","slug":"metabase-sqli-zero-day-exploited-in-customer-data-theft-attacks","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/08\/metabase-sqli-zero-day-exploited-in-customer-data-theft-attacks","title":{"rendered":"Metabase SQLi zero-day exploited in customer data-theft attacks"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/metabase-sqli-zero-day-exploited-in-customer-data-theft-attacks.jpg\"><\/a><\/p>\n<p>A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.<\/p>\n<p>Metabase disclosed the attacks on Thursday, warning that its Metabase Cloud SaaS platform was compromised through a previously unknown vulnerability affecting versions 1.58 and above. The company warns that self-hosted installations are also vulnerable.<\/p>\n<p>\u201cWe recently identified that Metabase Cloud was attacked by someone utilizing an unknown (\u201c0-day\u201d) security vulnerability in versions 1.58 and above,\u201d Metabase CEO Sameer Al-Sakran warned in a <a href=\"http:\/\/www.metabase.com\/blog\/security-update\" target=\"_blank\" rel=\"nofollow noopener\">blog post<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. Metabase disclosed the attacks on Thursday, warning that its Metabase Cloud SaaS platform was compromised through a previously unknown vulnerability affecting versions 1.58 and above. The company warns that self-hosted [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1492],"tags":[],"class_list":["post-242376","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=242376"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242376\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=242376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=242376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=242376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}