CVE-2026-40595: falha de alta gravidade em chartbrew
Chartbrew: Incorrect Access Control in public chart and export routes via missing onReport and SharePolicy checks
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.3%
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes public chart retrieval and export routes that only verify project-level public access and, for exports, a team-level export toggle. The routes do not verify whether the target chart is actually allowed on the public report or whether the governing SharePolicy permits public access. An unauthenticated attacker who knows a chart identifier in a public project can read or export chart data for charts that were intentionally hidden from the report. This issue has been patched in version 5.0.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
chartbrew · chartbrewCVEs relacionadas — chartbrew
No mesmo produto, das mais perigosas para as menos.
CVE-2026-25887HIGHChartbrew: Remote Code Execution (RCE) via MongoDB Dataset QueryEPSS 0.9%CVE-2026-25888HIGHChartbrew: Remote Code Execution (RCE) via Vulnerable APIEPSS 0.8%CVE-2026-27005HIGHChartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)EPSS 0.6%CVE-2026-27603HIGHChartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissionsEPSS 0.5%CVE-2026-61851MEDIUMChartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery ToolEPSS 0.5%CVE-2026-65980HIGHChartbrew: SQL Injection via Missing Backslash Escaping in ClickHouse Variable SubstitutionEPSS 0.5%