Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

A maximum-severity zero-day vulnerability in the Metabase business-analytics platform allows malicious remote administrator access to the platform and its downstream users. The flaw currently has no CVE assigned. The attacks could have a wide blast radius, potentially compromising sensitive data across organizations using the software.