CVE-2026-86005

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, the administrative BullMQ dashboard was mounted without an authentication check. The vulnerable surface is the Bull Board/BullMQ administration dashboard at /apps/queues. A remote unauthenticated attacker reaches /apps/queues on a Chartbrew instance where Redis and BullMQ are enabled and a reverse proxy does not independently block the route. The dashboard trusted network reachability as authorization and exposed its queue-management interface directly. Redis and BullMQ must be enabled and the route must be reachable. Available actions depend on the installed Bull Board version and queue state, while confidentiality depends on job payload and log contents. An unauthenticated user can inspect exposed job payloads and logs and, when enabled by the installed version and queue state, retry or delete jobs or otherwise alter queue processing, affecting confidentiality, integrity, or availability. This issue is fixed in version 5.2.3.

• CWE-306

• https://github.com/chartbrew/chartbrew/commit/91873ce25d2b76d7bb6de7c61f372d03d56cc4aa
• https://github.com/chartbrew/chartbrew/releases/tag/v5.2.3
• https://github.com/chartbrew/chartbrew/security/advisories/GHSA-w8g3-j8rf-qc5j
• https://github.com/chartbrew/chartbrew/security/advisories/GHSA-w8g3-j8rf-qc5j

Published

Nov 6, 2026

Last Modified

Nov 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85990Leantime is an open source project management system. Prior …8.8
• CVE-2026-85995Notepad++ is a free and open-source source code editor. From…7.3
• CVE-2026-85999Soup Sieve is a CSS selector library designed to be used wit…5.3
• CVE-2026-86000Soup Sieve is a CSS selector library designed to be used wit…5.3
• CVE-2026-86002Dokku is a docker-powered platform as a service. In Dokku ve…9
• CVE-2026-86003CoreDNS is a DNS server written in Go. Prior to 1.14.7, the …7.5
• CVE-2026-86008Mailu is a mail server distributed as a set of Docker images…7.2
• CVE-2026-86009Mailu is a mail server distributed as a set of Docker images…8.2
• CVE-2026-86016VNote is a note-taking platform. Prior to 4.3.0, VNote uses …8.2
• CVE-2026-86018Part-DB is an open source inventory management system for el…5.3
• CVE-2026-86019Part-DB is an open source inventory management system for el…5.3
• CVE-2026-8602In ScadaBR version 1.2.0, a Missing Authentication for Criti…9.1