CVE-2026-103928: Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or actions can invoke FILEREAD, FILEWRITE, CSVREAD, CSVWRITE, or LINKSCHEMA to read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so the vulnerable surface is exposed by default. This issue is fixed in versions 1.58.16, 1.59.13, 1.60.9, and 1.61.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Metabaseto a version that resolves this vulnerability.Fixed in 1.58.16 - Upgrade
Upgrade
Metabaseto a version that resolves this vulnerability.Fixed in 1.59.13 - Upgrade
Upgrade
Metabaseto a version that resolves this vulnerability.Fixed in 1.60.9 - Upgrade
Upgrade
Metabaseto a version that resolves this vulnerability.Fixed in 1.61.4
Event History
Frequently Asked Questions
Who can exploit this issue?
A user who is authorized to run native queries or actions against an H2 data source can exploit it. The affected functions execute against the Metabase server's filesystem or can link other databases.
Is a default Metabase deployment exposed?
Yes. The default sample database uses H2, so the vulnerable query surface is exposed by default when users have permission to run native queries or actions.
What can an attacker do through the affected H2 functions?
They can invoke FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA. This permits arbitrary file reads or writes on the Metabase server and may allow linking other databases.
Which versions contain fixes?
The issue is fixed in Metabase 1.58.16, 1.59.13, 1.60.9, and 1.61.4. Affected versions begin at 1.55.0 and include releases before the applicable fixed version.