Remote Code Execution Vulnerability in Chartbrew Web Application by Chartbrew
CVE-2026-25888

8.8HIGH

Key Information:

Vendor

Chartbrew

Status
Chartbrew
Vendor
CVE Published:
6 March 2026

What is CVE-2026-25888?

Chartbrew, an open-source web application designed to connect to databases and APIs to generate visual data representations, has a remote code execution vulnerability through its API in versions prior to 4.8.1. This flaw allows an attacker to execute arbitrary code remotely, posing significant security risks to users. The issue has been addressed and patched in version 4.8.1, and users are strongly urged to update to this version or later to mitigate potential threats.

Affected Version(s)

chartbrew < 4.8.1

References

https://github.com/chartbrew/chartbrew/security/advisorie...
x_refsource_CONFIRM
https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.