CVE-2026-103928 | Metabase up to 1.58.15/1.59.12/1.60.8/1.61.3 H2 Data Source privileges management

October 13, 2026 Yanac

A vulnerability was found in Metabase up to 1.58.15/1.59.12/1.60.8/1.61.3 and classified as critical. This impacts an unknown function of the component H2 Data Source. Executing a manipulation can lead to improper privilege management.

This vulnerability appears as CVE-2026-103928. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More