chartbrew vulnerabilities and fixes
Exploited and high-severity chartbrew vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 9.3CVE-2026-86005Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in ChartbrewVerify fixchartbrew chartbrew
1 min read - 8.1CVE-2026-85736Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH pathsVerify fixchartbrew chartbrew
1 min read - 7.5CVE-2026-85726Chartbrew: Blind NoSQL injection via date variable in embedded chartVerify fixchartbrew chartbrew
1 min read - 8.8CVE-2026-85712Chartbrew: Cross-tenant project takeover via body.team_id in /project routesVerify fixchartbrew chartbrew
2 min read - 7.5CVE-2026-85708Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokensVerify fixchartbrew chartbrew
1 min read - 9.8CVE-2026-85295Chartbrew: Full account takeover via JWTs accepted under default CB_SECRETVerify fixchartbrew chartbrew
1 min read - 9.8CVE-2026-54349Chartbrew SQL injection in dashboard filter substitutionVerify fixchartbrew chartbrew
1 min read - 7.0CVE-2026-54589Chartbrew: SSRF guard bypass via IPv6 NAT64/DNS64 addresses in API Data Connection outbound policy (validateOutboundUrl)Verify fixchartbrew chartbrew
1 min read