Metabase SQLi zero-day exploited in customer data-theft attacks

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, impacting Framework and Tally. The attacks targeted customer data. Organizations using Metabase are urged to patch immediately. Security teams should investigate for signs of compromise. The full scope of the breach remains under investigation by affected companies and cybersecurity researchers.