high7.2
CVE-2026-25887
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.
Impact
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, there is a remote code execution vulnerability via the MongoDB dataset Query. This issue has been patched in version 4.8.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Depomo | Chartbrew | before 4.8.1 |