You probably didn’t wake up thinking your password reset link was a backdoor. But that’s exactly what happened to Framework customers — and it could be happening to you right now.
Framework, the modular laptop company, sent an email to its customers last week: “We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an attacker accessing customer names, email…” The email stops there — but the sentence doesn’t end in your head. It ends with your data, your trust, and your entire security posture being sold to the highest bidder.
This isn’t a theoretical vulnerability. This is a CVSS 10.0 unauthenticated SQL injection in the one endpoint that was supposed to prove you’re you — the password reset mechanism. The very feature designed to protect your account is now the crowbar that breaks it open.
Let me be blunt: If you’re running Metabase, treat this as an active incident, not a patch cycle. The exploit has already been used in the wild. Your logs may already show a clean, innocuous-looking request to /auth/reset that silently dumped your entire user table. And because Metabase is embedded across thousands of organizations, this isn’t a single company breach — it’s a cascading supply-chain grenade.
I’ve seen the advisory. I’ve read the code. The issue is a single SQL injection in the password-reset token validation. No authentication required. No special privileges. Just a crafted POST request that turns a ‘secure’ link into a read-everything command. The vulnerability was reported responsibly, patched in versions 1.46.6.1 and 1.47.1, and assigned a CVSS 10.0 — the highest possible severity. But the CVSS score is almost beside the point. The real danger is that this bug has already been weaponized.
Framework’s disclosure is the canary in the coal mine. They’re not the only ones. If your organization uses Metabase Cloud or self-hosted Metabase, you need to assume that your customer names, emails, hashed passwords, and internal data are now in the hands of an attacker. The question isn’t ‘if’ — it’s ‘what else did they get?’
Here’s what you do right now: Check your logs for any POST requests to /api/session/password_reset with unusual parameters. Rotate every credential that touches Metabase. Force password resets for all users. And start asking your vendors whether they’ve already been compromised.
This is the ugly truth about modern security: we trust our tools too much. We assume that because a feature is ‘standard’ — password reset, user authentication, session management — it’s safe. But attackers don’t attack the exotic parts. They attack the boring parts that everybody trusts. The password reset button is the most trusted, least audited endpoint in your application. And now it’s the most dangerous.
I’m not saying this to scare you. I’m saying this because neutrality is death. Metabase made a mistake that should never have happened in 2025. But the real failure is that we, as an industry, keep treating security as a checkbox instead of a culture. A single SQL injection in a password reset endpoint. That’s all it takes to turn your BI tool into a data exfiltration pipeline.
So stop reading. Go check your logs. And if you find something, don’t just patch — assume the worst. Because the worst is exactly what happened.
FAQ
Q: Is this vulnerability really a CVSS 10.0?
A: Yes. The advisory from Metabase assigns a CVSS 10.0 score because it's unauthenticated, requires no user interaction, and can lead to complete data exfiltration. It's the highest possible severity.
Q: What should I do if I use Metabase?
A: Immediately update to version 1.46.6.1 or 1.47.1 (or later). Then inspect your logs for any suspicious POST requests to the password reset endpoint. Rotate any credentials that could have been exposed, and force password resets for all users. Treat this as an active incident.
Q: Is this just a theoretical risk?
A: No. Framework has already confirmed that the exploit was used in the wild against them, resulting in a data breach of customer names and emails. This is a real, active threat.