Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-25888

Chartbrew: Remote Code Execution (RCE) via Vulnerable API

Description

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via a vulnerable API. This issue has been patched in version 4.8.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

chartbrew chartbrew

  • < 4.8.1affected

References