CVE-2026-72899 | Metabase up to x.63.4 Field Filter field-filter injection

August 10, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Metabase up to x.63.4. Impacted is an unknown function of the component Field Filter. Performing a manipulation of the argument field-filter results in injection.

This vulnerability was named CVE-2026-72899. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More