Critical
Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
Type: advisorySources: OSV
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or actions can invoke FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA to read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so the vulnerable surface is exposed by default. This issue is fixed in versions 1.58.16, 1.59.13, 1.60.9, and 1.61.4.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-103928
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 11:24 UTC · Revision 1
Source evidence
Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions
core-osv · Original sourcePublished 13 Oct 2026, 15:44 UTC
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or actions can invoke FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA to read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so the vulnerable surface is exposed by default. This issue is fixed in versions 1.58.16, 1.59.13, 1.60.9, and 1.61.4.
osv:CVE-2026-103928
Complete source record
{
"id": "a4eee545a3d349a94359b3b6efaa4e81c0f921e199d5a10de527fc500da70ec9",
"url": "https://osv.dev/vulnerability/CVE-2026-103928",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions",
"summary": "Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or actions can invoke FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA to read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so the vulnerable surface is exposed by default. This issue is fixed in versions 1.58.16, 1.59.13, 1.60.9, and 1.61.4.",
"evidence": "osv:CVE-2026-103928",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2026-103928",
"aliases": [
"CVE-2026-103928",
"GHSA-cwxq-fmxq-jv8h"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/metabase/metabase",
"type": "GIT",
"events": [
{
"introduced": "25a78a355fa6f04e3ce2029006b24ebe9a02ebcb"
},
{
"fixed": "ae60d1cd156d097f084af43a536b3ab60510c9a4"
},
{
"introduced": "95d41fa1e4435aa4ff147c4c7cb0d08c2f3b586a"
},
{
"fixed": "abf3fb8427eccefd8d46149cdebe38f3b49f964f"
},
{
"introduced": "cc12039807af543e457938ac5b6fdf7927ae4110"
},
{
"fixed": "e82ba5f1ac349a27771670fdd5f10819548b1328"
},
{
"introduced": "d5bb4cce64086bd941b332fbbf7b19e6d02e222c"
},
{
"fixed": "e231432adcc813a75f3ca4832818bda2d9d265da"
},
{
"fixed": "8fb4f0c8a22f195390b4a1d8f5c21db695ae8cc3"
},
{
"fixed": "a943448e90e23dbb78001ddedbb15e9c0794473c"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0.55.0"
},
{
"fixed": "0.58.15.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "0.59.0"
},
{
"fixed": "0.59.12.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "0.60.0"
},
{
"fixed": "0.60.8.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "0.61.0"
},
{
"fixed": "0.61.3.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "8fb4f0c8a22f195390b4a1d8f5c21db695ae8cc3"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "a943448e90e23dbb78001ddedbb15e9c0794473c"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "abf3fb8427eccefd8d46149cdebe38f3b49f964f"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "ae60d1cd156d097f084af43a536b3ab60510c9a4"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "e231432adcc813a75f3ca4832818bda2d9d265da"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "ae60d1cd156d097f084af43a536b3ab60510c9a4"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v0.58.15.3"
},
{
"range": [
{
"fixed": "abf3fb8427eccefd8d46149cdebe38f3b49f964f"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v0.59.12.1"
},
{
"range": [
{
"fixed": "e82ba5f1ac349a27771670fdd5f10819548b1328"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v0.60.8.1"
},
{
"range": [
{
"fixed": "e231432adcc813a75f3ca4832818bda2d9d265da"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v0.61.3.4"
}
]
}
}
],
"versions": [
"v0.61.3.3",
"v0.61.3.2",
"v0.61.3.1",
"v0.61.3.x",
"v0.61.3",
"v0.60.8.x",
"v0.60.8",
"v0.61.2.10",
"v0.60.7.6",
"v0.61.2.9",
"v0.61.2.7",
"v0.60.7.7",
"v0.60.7.5",
"v0.61.2.6",
"v0.61.2.8",
"v0.61.2.5",
"v0.60.7.4",
"v0.61.2.4",
"v0.61.2.3",
"v0.60.7.3",
"v0.60.7.2",
"v0.61.2.2",
"v0.59.12.x",
"v0.59.12",
"v0.61.2.1",
"v0.60.7.1",
"v0.60.7.x",
"v0.60.7",
"v0.60.6.3",
"v0.61.2.x",
"v0.61.2",
"v0.61.1.5",
"v0.61.1.4",
"v0.60.6.2",
"v0.61.1.3",
"v0.61.1.2",
"v0.60.6.1",
"v0.61.1.1",
"v0.60.6.x",
"v0.60.6",
"v0.61.1.x",
"v0.61.1",
"v0.60.5.3",
"v0.61.0.10-beta",
"v0.60.5.2",
"v0.60.5.x",
"v0.60.5",
"v0.61.0.9-beta",
"v0.60.5.1",
"v0.60.4.3",
"v0.59.11.x",
"v0.59.11",
"v0.61.x",
"v0.61.0.x",
"v0.61.0.8-beta",
"v0.59.10.x",
"v0.59.10.1",
"v0.59.10",
"v0.60.4.x",
"v0.60.4.4",
"v0.60.4.2",
"v0.60.4.1",
"v0.60.4",
"v0.60.3.x",
"v0.60.3.8",
"v0.60.3.7",
"v0.60.3.6",
"v0.60.3.5",
"v0.60.3.4",
"v0.60.3.3",
"v0.59.9.x",
"v0.59.9.1",
"v0.60.3.2",
"v0.59.9",
"v0.60.3.1",
"v0.60.3",
"v0.59.8.3",
"v0.60.2.x",
"v0.60.2.6",
"v0.60.2.5",
"v0.60.2.4",
"v0.59.8.4",
"v0.59.8.x",
"v0.59.8.5",
"v0.60.2.3",
"v0.59.8.2",
"v0.59.8.1",
"v0.60.2.1",
"v0.60.2.2",
"v0.60.2",
"v0.60.1.x",
"v0.60.1.6",
"v0.60.1.5",
"embedding-sdk-0.60.0",
"v0.59.8",
"v0.59.7.x",
"v0.59.7.3",
"v0.60.1.4",
"v0.60.1.3",
"v0.59.7.2",
"v0.60.1.2",
"v0.59.7.1",
"v0.60.1.1",
"v0.60.1",
"v0.59.7",
"v0.60.0.8-beta",
"v0.59.6.4",
"v0.60.0.7-beta",
"v0.59.6.5",
"v0.60.0.6-beta",
"v0.59.6.3",
"v0.59.6.x",
"v0.59.6.2",
"v0.60.0.5-beta",
"v0.59.6",
"v0.60.0.4-beta",
"v0.59.5.2",
"v0.59.6.1",
"embedding-sdk-60-stable",
"embedding-sdk-0.60.0-beta.0",
"v0.59.5",
"v0.59.5.x",
"v0.59.5.1",
"v0.59.4.x",
"v0.59.4.5",
"v0.60.x",
"v0.60.0.x",
"v0.60.0.3-beta",
"v0.59.4.4",
"v0.59.4.3",
"v0.59.4.2",
"v0.59.4.1",
"v0.59.4",
"v0.59.3.x",
"v0.59.3.2",
"v0.59.3.1",
"v0.59.3",
"v0.59.2.7",
"v0.59.2.6",
"v0.59.2.5",
"v0.59.2.4",
"v0.59.2.3",
"v0.59.2.2",
"v0.59.2.1",
"v0.59.2.x",
"v0.59.2",
"v0.59.1.6",
"v0.59.1.5",
"v0.59.1.4",
"v0.59.1.3",
"v0.59.1.2",
"v0.59.1.1",
"embedding-sdk-0.59.0",
"v0.59.1.x",
"v0.59.1",
"v0.59.0.7-beta",
"v0.59.0.6-beta",
"v0.59.0.5-beta",
"v0.59.0.4-beta",
"v0.59.0.3-beta",
"v0.59.0.2-beta",
"embedding-sdk-59-stable",
"embedding-sdk-0.59.0-beta.0",
"v0.59.0.x",
"v0.59.0.1-beta"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103928.json"
}
}
],
"modified": "2026-10-28T02:30:28.162355936Z",
"provider": "osv",
"references": [
"https://github.com/metabase/metabase/releases/tag/v0.58.15.3",
"https://github.com/metabase/metabase/releases/tag/v0.59.12.1",
"https://github.com/metabase/metabase/releases/tag/v0.60.8.1",
"https://github.com/metabase/metabase/releases/tag/v0.61.3.4",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103928.json",
"https://github.com/metabase/metabase/security/advisories/GHSA-cwxq-fmxq-jv8h",
"https://nvd.nist.gov/vuln/detail/CVE-2026-103928",
"https://github.com/metabase/metabase/commit/8fb4f0c8a22f195390b4a1d8f5c21db695ae8cc3",
"https://github.com/metabase/metabase/commit/a943448e90e23dbb78001ddedbb15e9c0794473c",
"https://github.com/metabase/metabase/commit/abf3fb8427eccefd8d46149cdebe38f3b49f964f",
"https://github.com/metabase/metabase/commit/ae60d1cd156d097f084af43a536b3ab60510c9a4",
"https://github.com/metabase/metabase/commit/e231432adcc813a75f3ca4832818bda2d9d265da"
],
"provider_metadata": {
"cwe_ids": [
"CWE-73"
],
"cna_assigner": "GitHub_M",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "1.55.0"
},
{
"fixed": "1.58.16"
},
{
"introduced": "1.59.0"
},
{
"fixed": "1.59.13"
},
{
"introduced": "1.60.0"
},
{
"fixed": "1.60.9"
},
{
"introduced": "1.61.0"
},
{
"fixed": "1.61.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103928.json"
}
},
"related_cves": [
{
"value": "CVE-2026-103928",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 494931,
"published_at": "2026-10-13T15:44:37.906+00:00"
}