Executive Summary
A critical zero-day SQL injection vulnerability targeting Metabase Cloud and self-hosted instances (v58 and above) has been actively exploited to compromise enterprise database environments across multiple SaaS platforms. Threat actors gained unauthorized access to internal databases connected to Metabase business intelligence instances, resulting in significant data exfiltrations at online form platform Tally Forms, AI coding platform Kilo Code (Anaconda), and hardware manufacturer Framework. Organizations utilizing Metabase must immediately audit instance logs, update to patched versions, and rotate all exposed database and third-party API credentials.
Deep-Dive Technical Analysis
The incident stems from an unauthenticated, zero-day SQL injection flaw within Metabase's query parameter parsing routines. Metabase allows organizations to connect business databases to construct visual analytics and execute SQL queries. The vulnerability allows remote, unauthenticated attackers to supply crafted HTTP payloads that bypass input sanitization and execute arbitrary SQL commands directly against the underlying Metabase application database.
Once SQL injection is achieved on the application database, attackers escalate privileges to administrative levels, obtaining full database read/write permissions. In affected environments:
Affected Organization
Data Exfiltrated
Tally Forms
User email directories and hashed user passwords.
Kilo Code
User contact lists and active Slack access tokens (subsequently revoked).
Framework
Customer account records and order metadata via the connected database layer.
Because Metabase instances maintain active connection strings with elevated read permissions to core production databases, compromising the Metabase layer grants threat actors direct access to connected data warehouses without triggering perimeter database firewalls.
Industry Impact and Recommendations
This attack highlights the systemic supply-chain risk posed by business intelligence (BI) and data visualization tools, which serve as central points of convergence for organizational data.
Immediate Action Items
* Apply Metabase Hotfix: Upgrade all self-hosted Metabase deployments to version 58.1 or later immediately.
* Credential Rotation: Immediately invalidate and rotate all database credentials, Slack access tokens, OAuth keys, and third-party API keys stored in or connected to Metabase instances.
* Database Network Isolation: Ensure BI tools operate under strict principle-of-least-privilege (PoLP) database roles with read-only access where possible, isolated behind Web Application Firewalls (WAFs) and restricted VPN tunnels.
* Forensic Audit: Inspect HTTP server logs for anomalous POST requests directed at Metabase API endpoints containing SQL syntax fragments or unusual query parameters.