Chartbrew: 未认证图表筛选端点：POST /project/:project_id/chart/:chart_id/filter 缺少 verifyToken + checkPermissions

The primary impact of CVE-2026-27603 is the unauthorized exposure of sensitive data stored within Chartbrew charts. An attacker can bypass authentication and directly query the chart filter endpoint to retrieve data from any project, regardless of their intended access level. This could include confidential business metrics, financial data, or personally identifiable information (PII) depending on the data sources connected to the charts. The lack of authentication checks means that a simple HTTP request can trigger the data leak, making exploitation straightforward. This vulnerability presents a significant risk of data breaches and potential regulatory compliance violations.

Organizations using Chartbrew to visualize data from sensitive sources, particularly those with shared hosting environments or legacy configurations lacking robust access controls, are at significant risk. Teams relying on Chartbrew for internal reporting and dashboards containing confidential information are also vulnerable.

• nodejs / server:

# Check for Chartbrew versions prior to 4.8.4
npm list chartbrew

• generic web:

# Check for access to the filter endpoint without authentication
curl -I http://your-chartbrew-instance/project/123/chart/456/filter

• generic web:

# Examine access logs for requests to the filter endpoint from unusual IP addresses or without authentication headers.
grep '/project/[0-9]+/chart/[0-9]+/filter' /var/log/nginx/access.log

1. 2026-03-06Disclosure

   disclosure

1. 已保留2026-02-20
2. 发布日期2026-03-06
3. EPSS 更新日期2026-03-23

The primary mitigation for CVE-2026-27603 is to immediately upgrade Chartbrew to version 4.8.4 or later. If upgrading is not immediately feasible, consider implementing a temporary workaround by adding authentication middleware to the /project/:projectid/chart/:chartid/filter endpoint. This could involve a simple token verification or role-based access control check. Review all chart filter configurations to ensure no unintended data exposure. Monitor access logs for suspicious activity targeting the filter endpoint.