CVE-2026-30232: SSRF in Chartbrew Data Connections

The SSRF vulnerability in Chartbrew allows authenticated users to bypass security controls and initiate requests to unintended destinations. An attacker could leverage this to access sensitive internal services, such as databases or configuration management systems, by crafting malicious API data connection URLs. Furthermore, the ability to target cloud metadata endpoints (e.g., AWS EC2 instance metadata) could expose credentials or other sensitive information. The blast radius extends to any internal resources accessible from the Chartbrew server, potentially compromising the entire network if proper network segmentation is not in place.

1. Reserved2026-03-04
2. Published2026-04-10
3. Modified2026-04-15
4. EPSS updated2026-04-18

The primary mitigation for CVE-2026-30232 is to immediately upgrade Chartbrew to version 4.8.5 or later. If upgrading is not feasible due to compatibility issues or downtime constraints, consider implementing a Web Application Firewall (WAF) with rules to block requests to suspicious URLs or restrict access to internal IP ranges. Additionally, carefully review and restrict the permissions of authenticated users within Chartbrew to minimize the potential impact of a successful SSRF attack. After upgrading, confirm the fix by attempting to create an API data connection with an internal or cloud metadata URL and verifying that the request is blocked.