CVE-2026-103928: metabase >= 1.55.0, < 1.58.16, >= 1.59.0, < 1.59.13, >= 1.60.0, < 1.60.9, >= 1.61.0, < 1.61.4, >= 0.55.0, < 0.58.15.3…

Affected technology

metabase · >= 1.55.0, < 1.58.16, >= 1.59.0, < 1.59.13, >= 1.60.0, < 1.60.9, >= 1.61.0, < 1.61.4, >= 0.55.0, < 0.58.15.3, >= 0.59.0, < 0.59.12.1, >= 0.60.0, < 0.60.8.1, >= 0.61.0, < 0.61.3.4
metabase

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.