Metabase
Coverage of Metabase in the Nexus archive.
- Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase warned that a maximum-severity security flaw in its business intelligence and data visualization software has been exploited as a zero-day. The vulnerability, which has a CVSS score of 10.0, allows an unauthenticated remote attacker to inject arbitrary SQL into the application database. This capability could enable attackers to gain admin access without authentication.
- Linux kernel flaw opens root-only files to unprivileged users
A Linux kernel flaw, CVE-2026-46333, allows local unprivileged users to access root-only files, including SSH keys. The bug affects multiple LTS kernel lines from 5.10 upward, but a fix has already been implemented. The issue was reported by security consultancy Qualys and has been addressed by Linus Torvalds.
- Welcome to the Strip Mining Era of OSS Security
The article discusses the Strip Mining Era of OSS Security, highlighting its impact on open-source security. It provides insights into the current state of OSS security and the challenges it faces. The article is available on Metabase's blog.