Metabase - H2 Deserialization RCE Detection (CVE-2026-59827)

Detects potentially vulnerable Metabase versions affected by CVE-2026-59827 unsafe Java deserialization of H2 OTHER columns in native queries. Confirms version via /api/session/properties; full exploitation requires authenticated native-query access to an H2 database. !/usr/bin/env python3 --...