CVE-2026-50148: Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write

Q: What is the severity of CVE-2026-50148?

The severity of CVE-2026-50148 is critical with a score of 10.

Q: What are the affected versions in CVE-2026-50148?

CVE-2026-50148 affects Metabase versions 1.54.0 to 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4.

Q: How can CVE-2026-50148 vulnerability be exploited?

CVE-2026-50148 can be exploited by a Metabase user with permission to add or edit a database connection to achieve remote code execution.

Q: How do I fix CVE-2026-50148?

To fix CVE-2026-50148, upgrade Metabase to a version later than 1.60.4.

Q: What potential impact does CVE-2026-50148 have on systems?

CVE-2026-50148 allows arbitrary file write, which can lead to remote code execution on the Metabase server.

Published Jul 15, 2026

Updated

Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by configuring a Snowflake connection to an attacker-controlled server, because a flaw in the Snowflake JDBC driver can write arbitrary files anywhere on the Metabase host, including replacing one of Metabase's own database driver files that later executes inside the Metabase process. This issue is fixed in versions 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4.

Affected Software

8 affected components

Metabase>1.54.0<=1.54.24, >1.54.0<=1.55.24, >1.54.0<=1.56.25, >1.54.0<=1.57.19, >1.54.0<=1.58.14, >1.54.0<=1.59.10, >1.54.0<=1.60.4

Metabase Metabase>=1.54.0<1.54.24

Metabase Metabase>=1.55.0<1.55.24

Metabase Metabase>=1.56.0<1.56.25

Metabase Metabase>=1.57.0<1.57.19

Metabase Metabase>=1.58.0<1.58.14

Metabase Metabase>=1.59.0<1.59.10

Metabase Metabase>=1.60.0<1.60.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.54.24
Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.55.24
Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.56.25
Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.57.19
Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.58.14
Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.59.10
Upgrade
Upgrade Metabase to a version that resolves this vulnerability.
Fixed in 1.60.4

Event History

Jul 15, 2026

CVE Published

via MITRE·03:18 PM

Data Sourced

via MITRE·03:18 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-50148?

The severity of CVE-2026-50148 is critical with a score of 10.

What are the affected versions in CVE-2026-50148?