CVE-2026-25887

Summary

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via the MongoDB dataset Query. This issue has been patched in version 4.8.1.

Affected Software

Weaknesses

• CWE-94: CWE-94: Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/chartbrew/chartbrew/security/advisories/GHSA-x4r6-prmw-7wvw
• https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1

• ←Previous
• Next→