VDB
CVE-2026-22805
CVE-2026-22805
PUBLISHED
CVSS 2.0999999046325684 LOW
Metabase is an open-source data analytics platform. Prior to 55.13, 56.3, and 57.1, self-hosted Metabase instances that allow users to create subscriptions could be potentially impacted if their Metabase is colocated with other unsecured resources. This vulnerability is fixed in 55.13, 56.3, and 57.1.
EPSS 0.24% · 14.9th percentile
Risk Scores
CVSS 4.0
2.0999999046325684
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS Score
0.24%
14.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| metabase | metabase | >= 0.57.0-beta, < 57.1, >= 0.56.0-beta, < 56.3, < 55.13 |
Timeline
- Jan 12, 2026 CVE Published
- Jan 13, 2026 EPSS Score
- Jan 13, 2026 PoC Published
- Jan 17, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 24, 2026 EPSS Score
- Jan 27, 2026 EPSS Score
- Jan 31, 2026 EPSS Score
- Feb 3, 2026 EPSS Score
- Feb 7, 2026 EPSS Score
- Feb 10, 2026 EPSS Score
- Feb 14, 2026 EPSS Score