CVE-2026-25877

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25877", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-06T21:08:39.128Z", "datePublished": "2026-03-06T04:07:01.105Z", "dateUpdated": "2026-03-06T16:09:00.476Z"}, "containers": {"cna": {"title": "Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fcr-x8x8-mrxc", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fcr-x8x8-mrxc"}, {"name": "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1"}], "affected": [{"vendor": "chartbrew", "product": "chartbrew", "versions": [{"version": "< 4.8.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-06T04:07:01.105Z"}, "descriptions": [{"lang": "en", "value": "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs authorization checks based solely on the project_id parameter when handling chart-related operations (update, delete, etc.). No authorization check is performed against the chart_id itself. This allows an authenticated user who has access to any project to manipulate or access charts belonging to other users/ project. This issue has been patched in version 4.8.1."}], "source": {"advisory": "GHSA-9fcr-x8x8-mrxc", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-06T15:50:41.617781Z", "id": "CVE-2026-25877", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T16:09:00.476Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25877", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-06T15:50:41.617781Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T15:50:42.704Z"}}], "cna": {"title": "Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations", "source": {"advisory": "GHSA-9fcr-x8x8-mrxc", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "chartbrew", "product": "chartbrew", "versions": [{"status": "affected", "version": "< 4.8.1"}]}], "references": [{"url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fcr-x8x8-mrxc", "name": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fcr-x8x8-mrxc", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1", "name": "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs authorization checks based solely on the project_id parameter when handling chart-related operations (update, delete, etc.). No authorization check is performed against the chart_id itself. This allows an authenticated user who has access to any project to manipulate or access charts belonging to other users/ project. This issue has been patched in version 4.8.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-06T04:07:01.105Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25877", "state": "PUBLISHED", "dateUpdated": "2026-03-06T16:09:00.476Z", "dateReserved": "2026-02-06T21:08:39.128Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-06T04:07:01.105Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "chartbrew", "vendor": "chartbrew", "versions": [{"status": "affected", "version": "< 4.8.1"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:depomo:chartbrew:*:*:*:*:*:*:*:*", "matchCriteriaId": "55A8DB77-A290-400C-B2C5-7D0C7C82F7BE", "versionEndExcluding": "4.8.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.1, the application performs authorization checks based solely on the project_id parameter when handling chart-related operations (update, delete, etc.). No authorization check is performed against the chart_id itself. This allows an authenticated user who has access to any project to manipulate or access charts belonging to other users/ project. This issue has been patched in version 4.8.1."}, {"lang": "es", "value": "Chartbrew es una aplicaci\u00f3n web de c\u00f3digo abierto que puede conectarse directamente a bases de datos y APIs y usar los datos para crear gr\u00e1ficos. Antes de la versi\u00f3n 4.8.1, la aplicaci\u00f3n realiza comprobaciones de autorizaci\u00f3n basadas \u00fanicamente en el par\u00e1metro project_id al manejar operaciones relacionadas con gr\u00e1ficos (actualizar, eliminar, etc.). No se realiza ninguna comprobaci\u00f3n de autorizaci\u00f3n contra el propio chart_id. Esto permite a un usuario autenticado que tiene acceso a cualquier proyecto manipular o acceder a gr\u00e1ficos pertenecientes a otros usuarios/proyecto. Este problema ha sido parcheado en la versi\u00f3n 4.8.1."}], "id": "CVE-2026-25877", "lastModified": "2026-06-17T10:25:21.927", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25877", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-06T15:50:41.617781Z", "version": "2.0.3"}}]}, "published": "2026-03-06T05:16:28.230", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/chartbrew/chartbrew/releases/tag/v4.8.1"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-9fcr-x8x8-mrxc"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-639"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,4.8.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "chartbrew", "source": "cna", "vendor": "chartbrew"}, "product": "chartbrew", "vendor": "chartbrew"}], "analysis": {"en": {"generated_at": "2026-04-16T11:42:03.073324+00:00", "value": {"mitigation_remediation": ["Apply the Chartbrew 4.8.1 release or later to remove the insecure authorization check.", "Restrict user permissions to a least\u2011privilege model, ensuring that only project owners or explicitly granted users can perform chart modifications.", "Review existing user and chart permissions after upgrading; if necessary, revoke or re\u2011assign chart access for users who should not have visibility into other projects."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized access or modification of chart resources via IDOR"}, "threat_synthesis": {"affected_systems": "All installations of Chartbrew prior to version 4.8.1 are affected. The issue applies to any user who is authenticated and has access to at least one project, regardless of whether the targeted chart belongs to the same project. The affected product is Chartbrew, an open\u2011source web application that can connect to databases and APIs for chart creation.", "description_and_impact": "The vulnerability in Chartbrew arises because the application performs authorization checks only on the project_id parameter when handling chart operations such as update and delete. No check is performed against the chart_id itself, allowing an authenticated user who has permission to any project to manipulate or read charts belonging to other projects. The result is a classic Insecure Direct Object Reference that can expose sensitive data, alter or delete chart definitions, and undermine the integrity and confidentiality of the data presented by the application. The CVSS score of 6.5 indicates a moderate severity with non\u2011negligible impact when exploited.", "risk_and_exploitability": "The EPSS score of below 1% suggests that exploitation is unlikely in the near term, and the vulnerability is not listed in CISA\u2019s KEV catalog. However, the CVSS score of 6.5 reflects moderate potential impact, and the attack vector is straightforward: an attacker simply supplies a different chart_id when invoking chart update or delete endpoints. Given that the exploitation requires only an authenticated session, the risk is real for any environment where users have broad project access. The easiest mitigation is to apply the patch released in version 4.8.1; otherwise, reduce risk by tightening access controls on chart endpoints."}}}}, "created": "2026-03-06T14:56:00.678301+00:00", "updated": "2026-04-16T11:45:26.269367+00:00", "vendors": ["chartbrew", "chartbrew$PRODUCT$chartbrew"]}