CVE-2026-33725 Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import

[
  {
    "vendor": "metabase",
    "product": "metabase",
    "versions": [
      {
        "version": "< 1.54.22",
        "status": "affected"
      },
      {
        "version": ">= 1.55.0, < 1.55.22",
        "status": "affected"
      },
      {
        "version": ">= 1.56.0, < 1.56.22",
        "status": "affected"
      },
      {
        "version": ">= 1.57.0, < 1.57.16",
        "status": "affected"
      },
      {
        "version": ">= 1.58.0, < 1.58.10",
        "status": "affected"
      },
      {
        "version": ">= 1.59.0, < 1.59.4",
        "status": "affected"
      }
    ]
  }
]