CVE-2026-40603

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, Chartbrew exposes a legacy dashboard route that returns a project's report data to any authenticated member of the same team, even when that user does not have access to the specific project. The route bypasses project-level authorization and returns the raw project object. As a result, a low-privileged same-team user can read another project's dashboard data and recover the project's stored report password from the response. This issue has been patched in version 5.0.0.

• CWE-284

• https://github.com/chartbrew/chartbrew/releases/tag/v5.0.0
• https://github.com/chartbrew/chartbrew/security/advisories/GHSA-6qr3-g75h-xm3f
• https://github.com/chartbrew/chartbrew/security/advisories/GHSA-6qr3-g75h-xm3f

Published

Apr 30, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40598Mantis Bug Tracker (MantisBT) is an open source issue tracke…6.9
• CVE-2026-40599ClearanceKit intercepts file-system access events on macOS a…7.1
• CVE-2026-4060The Geo Mashup plugin for WordPress is vulnerable to Time-Ba…7.5
• CVE-2026-40600Chartbrew is an open-source web application that can connect…8.1
• CVE-2026-40601Chartbrew is an open-source web application that can connect…7.5
• CVE-2026-40602The Home Assistant Command-line interface (hass-cli) is a co…5.6
• CVE-2026-40604ClearanceKit intercepts file-system access events on macOS a…4.4
• CVE-2026-40605Tautulli is a Python based monitoring and tracking tool for …5.7
• CVE-2026-40606mitmproxy is a interactive TLS-capable intercepting HTTP pro…4.8
• CVE-2026-40607Mantis Bug Tracker (MantisBT) is an open source issue tracke…7.5
• CVE-2026-40608Next AI Draw.io is a next.js web application that integrates…5.5
• CVE-2026-40609Rejected reason: This CVE is a duplicate of another CVE.