EIP-2026-103298

This exploit leverages CVE-2023-38646 to achieve pre-authentication remote code execution in Metabase 0.46.6 by abusing the setup validation endpoint to inject a malicious H2 database trigger. The trigger executes arbitrary Java code, fetching and running a reverse shell payload.