CVE-2025-27141

Metabase Enterprise Edition is the enterprise version of Metabase business intelligence and data analytics software. Starting in version 1.47.0 and prior to versions 1.50.36, 1.51.14, 1.52.11, and 1.53.2 of Metabase Enterprise Edition, users with impersonation permissions may be able to see results of cached questions, even if their permissions don’t allow them to see the data. If some user runs a question which gets cached, and then an impersonated user runs that question, then the impersonated user sees the same results as the previous user. These cached results may include data the impersonated user should not have access to. This vulnerability only impacts the Enterprise Edition of Metabase and not the Open Source Edition. Versions 1.53.2, 1.52.11, 1.51.14, and 1.50.36 contains a patch. Versions on the 1.49.X, 1.48.X, and 1.47.X branches are vulnerable but do not have a patch available, so users should upgrade to a major version with an available fix. Disabling question caching is a workaround for this issue.

• CWE-732

• https://github.com/metabase/metabase/security/advisories/GHSA-6cc4-h534-xh5pVendor Advisory
• https://www.metabase.com/docs/latest/configuring-metabase/cachingTechnical Description
• https://www.metabase.com/docs/latest/permissions/impersonationTechnical Description

Published

Feb 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27136LocalS3 is an Amazon S3 mock service for testing and local d…5.5
• CVE-2025-27137Dependency-Track is a component analysis platform that allow…4.4
• CVE-2025-27138DataEase is an open source business intelligence and data vi…9.8
• CVE-2025-27139Combodo iTop is a web based IT service management tool. Vers…5.4
• CVE-2025-2714A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0.…5.3
• CVE-2025-27140WeGIA is a Web manager for charitable institutions. An OS Co…9.8
• CVE-2025-27142LocalSend is a free, open-source app that allows users to se…8.8
• CVE-2025-27143Better Auth is an authentication and authorization library f…6.1
• CVE-2025-27144Go JOSE provides an implementation of the Javascript Object …6.6
• CVE-2025-27145copyparty, a portable file server, has a DOM-based cross-sit…6.1
• CVE-2025-27146matrix-appservice-irc is a Node.js IRC bridge for Matrix. Th…4.3
• CVE-2025-27147The GLPI Inventory Plugin handles various types of tasks for…8.2