Cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*

A critical pre-authentication Remote Code Execution vulnerability in Metabase allows unauthenticated attackers to execute arbitrary system commands via malicious H2 database connection strings.