Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-25887

Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query

Description

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via the MongoDB dataset Query. This issue has been patched in version 4.8.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

chartbrew chartbrew

  • < 4.8.1affected

References