Metabase said its SQL injection zero-day in versions 1.58 and later is now being exploited in the wild, with public proof-of-concept code circulating and Cloud already patched. The exposed entry point is the /api/session/reset_password endpoint on self-hosted instances.
The flaw lets a remote attacker inject SQL into Metabase’s application database, which can hand over admin access. From there, Metabase can expose the database credentials it stores for connected systems, along with any data those connections can reach, so cleanup may extend beyond the app itself if secrets were already taken.
For operators who keep Metabase on the public Internet, the exposure sits at the analytics layer and can become access to downstream databases even after the BI server is upgraded. If the instance was reachable and abused, the durable risk is whatever credentials and data the platform could see before the patch landed.