CVE-2026-72898

LLM-synthesized narrative grounded in this CVE's description and references.

• osv-coords3 versions

  pkg:apk/chainguard/metabase-oci-entrypointpkg:apk/chainguard/metabase-compatpkg:apk/chainguard/metabase

  < 0.63.2-r1+ 2 more

  • (no CPE)range: < 0.63.2-r1
  • (no CPE)range: < 0.63.2-r1
  • (no CPE)range: < 0.63.2-r1
• Metabase/Metabasellm-fuzzy3 versions

  (expand)+ 2 more

  • (no CPE)
  • cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*range: >=0.58.0,<0.58.24
  • cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*range: >=1.58.0,<1.58.24

• github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjfnvdMitigationPatchVendor Advisory
• www.metabase.com/blog/security-updatenvdMitigationPatchVendor Advisory
• raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.jsonnvdThird Party Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
• www.cve.org/CVERecordnvdVDB Entry

• 14th September – Threat Intelligence Report
  Check Point Research · Sep 14, 2026
• Mathspace Data Breach Exposes Over 1 Million People
  SecurityWeek · Sep 8, 2026
• Online Maths Learning Platform Mathspace Disclosed Data Breach Impacts 1 Million Users
  Cyber Security News · Sep 7, 2026
• Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
  The Hacker News · Sep 5, 2026
• CISA Adds Three Known Exploited Vulnerabilities to Catalog
  CISA Alerts