CVE-2026-33725

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-33725", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-23T17:34:57.559Z", "datePublished": "2026-03-27T00:19:39.397Z", "dateUpdated": "2026-03-28T03:55:51.956Z"}, "containers": {"cna": {"title": "Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import", "problemTypes": [{"descriptions": [{"cweId": "CWE-502", "lang": "en", "description": "CWE-502: Deserialization of Untrusted Data", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229"}], "affected": [{"vendor": "metabase", "product": "metabase", "versions": [{"version": "< 1.54.22", "status": "affected"}, {"version": ">= 1.55.0, < 1.55.22", "status": "affected"}, {"version": ">= 1.56.0, < 1.56.22", "status": "affected"}, {"version": ">= 1.57.0, < 1.57.16", "status": "affected"}, {"version": ">= 1.58.0, < 1.58.10", "status": "affected"}, {"version": ">= 1.59.0, < 1.59.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-27T00:19:39.397Z"}, "descriptions": [{"lang": "en", "value": "Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, authenticated admins on Metabase Enterprise Edition can achieve Remote Code Execution (RCE) and Arbitrary File Read via the `POST /api/ee/serialization/import` endpoint. A crafted serialization archive injects an `INIT` property into the H2 JDBC spec, which can execute arbitrary SQL during a database sync. We confirmed this was possible on Metabase Cloud. This only affects Metabase Enterprise. Metabase OSS lacks the affected codepaths. All versions of Metabase Enterprise that have serialization, which dates back to at least version 1.47, are affected. Metabase Enterprise versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4 patch the issue. As a workaround, disable the serialization import endpoint in their Metabase instance to prevent access to the vulnerable codepaths."}], "source": {"advisory": "GHSA-fppj-vcm3-w229", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-27T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-33725"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-28T03:55:51.956Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-33725", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-27T13:26:42.609115Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T13:26:48.080Z"}}], "cna": {"title": "Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import", "source": {"advisory": "GHSA-fppj-vcm3-w229", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "metabase", "product": "metabase", "versions": [{"status": "affected", "version": "< 1.54.22"}, {"status": "affected", "version": ">= 1.55.0, < 1.55.22"}, {"status": "affected", "version": ">= 1.56.0, < 1.56.22"}, {"status": "affected", "version": ">= 1.57.0, < 1.57.16"}, {"status": "affected", "version": ">= 1.58.0, < 1.58.10"}, {"status": "affected", "version": ">= 1.59.0, < 1.59.4"}]}], "references": [{"url": "https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229", "name": "https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, authenticated admins on Metabase Enterprise Edition can achieve Remote Code Execution (RCE) and Arbitrary File Read via the `POST /api/ee/serialization/import` endpoint. A crafted serialization archive injects an `INIT` property into the H2 JDBC spec, which can execute arbitrary SQL during a database sync. We confirmed this was possible on Metabase Cloud. This only affects Metabase Enterprise. Metabase OSS lacks the affected codepaths. All versions of Metabase Enterprise that have serialization, which dates back to at least version 1.47, are affected. Metabase Enterprise versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4 patch the issue. As a workaround, disable the serialization import endpoint in their Metabase instance to prevent access to the vulnerable codepaths."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502: Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-27T00:19:39.397Z"}}}, "cveMetadata": {"cveId": "CVE-2026-33725", "state": "PUBLISHED", "dateUpdated": "2026-03-28T03:55:51.956Z", "dateReserved": "2026-03-23T17:34:57.559Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-27T00:19:39.397Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "metabase", "vendor": "metabase", "versions": [{"status": "affected", "version": "< 1.54.22"}, {"status": "affected", "version": ">= 1.55.0, < 1.55.22"}, {"status": "affected", "version": ">= 1.56.0, < 1.56.22"}, {"status": "affected", "version": ">= 1.57.0, < 1.57.16"}, {"status": "affected", "version": ">= 1.58.0, < 1.58.10"}, {"status": "affected", "version": ">= 1.59.0, < 1.59.4"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "5FCFE67B-8A5E-45D2-BD6D-F4EC79D37CF3", "versionEndExcluding": "1.54.22", "vulnerable": true}, {"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "D480FC19-D356-4ED2-8B54-531E5E84E159", "versionEndExcluding": "1.55.22", "versionStartIncluding": "1.55.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "4CDA1028-BBCD-4BF0-A3C4-9D961E95C165", "versionEndExcluding": "1.56.22", "versionStartIncluding": "1.56.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "9B11088D-C12A-4782-95A9-96D47DECE1C3", "versionEndExcluding": "1.57.16", "versionStartIncluding": "1.57.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "5148A309-3FE0-47CE-9613-30421D8B5299", "versionEndExcluding": "1.58.10", "versionStartIncluding": "1.58.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "9D1B94DC-E468-4175-A1BC-E078E8D32A63", "versionEndExcluding": "1.59.4", "versionStartIncluding": "1.59.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, authenticated admins on Metabase Enterprise Edition can achieve Remote Code Execution (RCE) and Arbitrary File Read via the `POST /api/ee/serialization/import` endpoint. A crafted serialization archive injects an `INIT` property into the H2 JDBC spec, which can execute arbitrary SQL during a database sync. We confirmed this was possible on Metabase Cloud. This only affects Metabase Enterprise. Metabase OSS lacks the affected codepaths. All versions of Metabase Enterprise that have serialization, which dates back to at least version 1.47, are affected. Metabase Enterprise versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4 patch the issue. As a workaround, disable the serialization import endpoint in their Metabase instance to prevent access to the vulnerable codepaths."}, {"lang": "es", "value": "Metabase es una herramienta de inteligencia de negocios de c\u00f3digo abierto y an\u00e1lisis embebido. En Metabase Enterprise anterior a las versiones 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10 y 1.59.4, los administradores autenticados en Metabase Enterprise Edition pueden lograr Ejecuci\u00f3n Remota de C\u00f3digo (RCE) y Lectura Arbitraria de Archivos a trav\u00e9s del endpoint 'POST /API/ee/serialization/import'. Un archivo de serializaci\u00f3n manipulado inyecta una propiedad 'INIT' en la especificaci\u00f3n H2 JDBC, que puede ejecutar SQL arbitrario durante una sincronizaci\u00f3n de base de datos. Confirmamos que esto era posible en Metabase Cloud. Esto solo afecta a Metabase Enterprise. Metabase OSS carece de las rutas de c\u00f3digo afectadas. Todas las versiones de Metabase Enterprise que tienen serializaci\u00f3n, lo que se remonta al menos a la versi\u00f3n 1.47, est\u00e1n afectadas. Las versiones de Metabase Enterprise 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10 y 1.59.4 parchean el problema. Como soluci\u00f3n alternativa, deshabilite el endpoint de importaci\u00f3n de serializaci\u00f3n en su instancia de Metabase para evitar el acceso a las rutas de c\u00f3digo vulnerables."}], "id": "CVE-2026-33725", "lastModified": "2026-06-17T10:37:59.650", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33725", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-27T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-03-27T01:16:19.837", "references": [{"source": "security-advisories@github.com", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.54.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.55.0,1.55.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.56.0,1.56.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.57.0,1.57.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.58.0,1.58.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.59.0,1.59.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "metabase", "source": "cna", "vendor": "metabase"}, "product": "metabase", "vendor": "metabase"}], "analysis": {"en": {"generated_at": "2026-04-02T04:13:01.473267+00:00", "value": {"mitigation_remediation": ["Upgrade Metabase Enterprise to version 1.54.22 or later, which fixes the serialization import vulnerability.", "If an upgrade cannot be performed immediately, disable the /api/ee/serialization/import endpoint to block access to the vulnerable code path.", "Verify the endpoint is inaccessible to unauthenticated users and that the serialization import functionality is not exposed.", "Keep monitoring logs for any attempts to use the import endpoint or for unusual database activity."], "summary": {"action": "Patch Immediately", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Metabase Enterprise Edition only. Versions from 1.47 up to, but not including, 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4 are susceptible. The latest patched releases are 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4. The open\u2011source edition does not contain the vulnerable code paths.", "description_and_impact": "Metabase is a business intelligence tool that allows authenticated administrators to import serialized archives. A crafted archive can inject an INIT property into the H2 JDBC specification, which is executed during a database synchronization. This injection enables an attacker to run arbitrary SQL, leading to remote code execution and the ability to read arbitrary files, and it has been confirmed to work on Metabase Cloud.", "risk_and_exploitability": "This issue has a CVSS score of 7.2 and an EPSS score of less than 1 percent, indicating moderate severity and a low probability of widespread exploitation. It is not listed in the CISA Known Exploited Vulnerabilities catalog. Attackers must first authenticate as an administrator and use the POST /api/ee/serialization/import endpoint to deliver the malicious payload, so the attack requires privileged access and a deliberate upload action."}}}}, "created": "2026-03-27T08:31:13.470808+00:00", "updated": "2026-04-02T07:55:54.943815+00:00", "vendors": ["metabase", "metabase$PRODUCT$metabase"]}