CVE-2026-33725 Details
Description
Metabase is an open source business intelligence and embedded analytics tool. In Metabase Enterprise prior to versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4, authenticated admins on Metabase Enterprise Edition can achieve Remote Code Execution (RCE) and Arbitrary File Read via the `POST /api/ee/serialization/import` endpoint. A crafted serialization archive injects an `INIT` property into the H2 JDBC spec, which can execute arbitrary SQL during a database sync. We confirmed this was possible on Metabase Cloud. This only affects Metabase Enterprise. Metabase OSS lacks the affected codepaths. All versions of Metabase Enterprise that have serialization, which dates back to at least version 1.47, are affected. Metabase Enterprise versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4 patch the issue. As a workaround, disable the serialization import endpoint in their Metabase instance to prevent access to the vulnerable codepaths.
A remote code execution (RCE) and arbitrary file read vulnerability has been identified in Metabase Enterprise versions prior to 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, and 1.59.4. The issue arises in the 'POST /api/ee/serialization/import' endpoint, where authenticated admins can exploit a crafted serialization archive that injects an 'INIT' property into the H2 JDBC specification. This injection allows the execution of arbitrary SQL during a database synchronization process, with confirmed exploitation on Metabase Cloud. The vulnerability affects all Metabase Enterprise versions with serialization capabilities, dating back to at least version 1.47.
Users can upgrade to Metabase Enterprise versions 1.54.22, 1.55.22, 1.56.22, 1.57.16, 1.58.10, or 1.59.4. For those using Docker, the updated images are available as 'metabase/metabase-enterprise:v1.54.22.x', 'metabase/metabase-enterprise:v1.55.22.x', 'metabase/metabase-enterprise:v1.56.22.x', 'metabase/metabase-enterprise:v1.57.16.x', 'metabase/metabase-enterprise:v1.58.10.x', and 'metabase/metabase-enterprise:v1.59.4.x'. Alternatively, the JAR files for the patched versions can be downloaded from the Metabase downloads site.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/metabase/metabase/security/advisories/GHSA-fppj-vcm3-w229 | [email protected] | MitigationPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| metabase metabase | < 1.54.22 >= 1.55.0, < 1.55.22 >= 1.56.0, < 1.56.22 >= 1.57.0, < 1.57.16 >= 1.58.0, < 1.58.10 >= 1.59.0, < 1.59.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 1, 2026 | Initial Analysis | [email protected] |
| Mar 27, 2026 | New CVE Received | [email protected] |