Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

chartbrew — Vulnerabilities & Security Advisories 30

All 30 CVE vulnerabilities found in chartbrew, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security advisories and vulnerability reports specifically for the chartbrew software product, categorized by weakness type and relevant security tags. The collection encompasses a comprehensive range of identified flaws, including remote code execution, privilege escalation, and data exposure issues, covering the entire historical timeline from the product's initial release through the most recent disclosed incidents. Visitors can utilize this resource to track the vendor's official security advisories over time, gain a deeper understanding of how specific weakness classes manifest within chartbrew's architecture, or review the complete vulnerability history to assess the product's long-term security posture. By centralizing these disparate reports, the page serves as a critical reference for security analysts, developers, and administrators tasked with evaluating risk, prioritizing remediation efforts, and ensuring the integrity of chartbrew deployments in their environments. The data presented here is curated from public sources to provide an accurate and chronological view of the product's security evolution without relying on unverified claims or speculative assessments.

Vendor: chartbrew

CVE ID Title CVSS Severity Published
CVE-2026-69128 Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier + pg_stat_file/pg_ls_* sibling gap) CWE-22 4.6 Medium 2026-11-06
CVE-2026-68935 Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections CWE-918 9.1 Critical 2026-11-06
CVE-2026-68933 Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage CWE-307 7.5 High 2026-11-06
CVE-2026-86005 Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew CWE-306 9.3 Critical 2026-11-06
CVE-2026-85736 Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH paths CWE-73 8.1 High 2026-11-06
CVE-2026-85726 Chartbrew: Blind NoSQL injection via date variable in embedded chart CWE-943 7.5 High 2026-11-06
CVE-2026-85712 Chartbrew: Cross-tenant project takeover via body.team_id in /project routes CWE-639 8.8 High 2026-11-06
CVE-2026-85708 Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens CWE-347 7.5 High 2026-11-06
CVE-2026-85295 Chartbrew: Full account takeover via JWTs accepted under default CB_SECRET CWE-1394 9.8 Critical 2026-11-06
CVE-2026-54349 Chartbrew SQL injection in dashboard filter substitution CWE-89 9.8 Critical 2026-11-06
CVE-2026-54589 Chartbrew: SSRF guard bypass via IPv6 NAT64/DNS64 addresses in API Data Connection outbound policy (validateOutboundUrl) CWE-918 7.0 High 2026-11-06
CVE-2026-65980 Chartbrew: SQL Injection via Missing Backslash Escaping in ClickHouse Variable Substitution CWE-89 7.9 High 2026-09-21
CVE-2026-61851 Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool CWE-184 6.5 Medium 2026-09-21
CVE-2026-61852 Chartbrew: SQL Injection via row_limit Parameter in AI runQuery Tool CWE-89 5.8 Medium 2026-09-21
CVE-2026-61743 Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation CWE-350 6.3 Medium 2026-09-21
CVE-2026-41518 Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend) CWE-79 7.6 High 2026-06-04
CVE-2026-40603 Chartbrew: Incorrect Access Control in /api/project/dashboard/:brewName via same-team override CWE-284 6.5 Medium 2026-04-30
CVE-2026-40601 Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle CWE-862 7.5 High 2026-04-30
CVE-2026-40600 Chartbrew: Incorrect Access Control in project share policy routes via unbound policy_id CWE-639 8.1 High 2026-04-30
CVE-2026-40595 Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checks CWE-284 7.5 High 2026-04-30
CVE-2026-35514 Unauthenticated Account Registration via /user/invited Bypasses All Signup Restrictions in Chartbrew CWE-306 6.5 Medium 2026-04-30
CVE-2026-40904 Chartbrew: Incorrect Access Control in dataset and dataRequest routes via team-scoped permission checks CWE-284 8.1 High 2026-04-30
CVE-2026-32252 Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id` CWE-285 7.7 High 2026-04-10
CVE-2026-30232 Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs CWE-918 8.1 - 2026-04-10
CVE-2026-27605 Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API CWE-434 6.3 Medium 2026-03-06
CVE-2026-27603 Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions CWE-306 5.3 - 2026-03-06
CVE-2026-27005 Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables) CWE-89 9.1 - 2026-03-06
CVE-2026-25888 Chartbrew: Remote Code Execution (RCE) via Vulnerable API CWE-94 8.8 High 2026-03-06
CVE-2026-25887 Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query CWE-94 7.2 High 2026-03-06
CVE-2026-25877 Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations CWE-284 6.5 Medium 2026-03-06

All 30 known CVE vulnerabilities affecting chartbrew with full Chinese analysis, references, and POCs where available.