CVE-2026-61743

Received Received - Intake

Chartbrew DNS Rebinding Vulnerability in API Connection Validation

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: GitHub, Inc.

Description

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's server/modules/safeRequest.js calls validateOutboundUrl() to resolve and validate a target hostname, but request-promise performs a separate DNS resolution for the actual connection. An authenticated user who can create or test API connections and controls the target DNS name can return a public address during validation and a private address during the request, bypassing the protections implemented by server/modules/outboundTargetPolicy.js. This DNS rebinding condition can expose internal services, localhost resources, or cloud metadata endpoints. This issue is fixed in version 5.2.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-61743

Affected Vendors & Products

Vendor	Product	Version / Range
chartbrew	chartbrew	5.2.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-350	The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.

Attack-Flow Graph

Executive Summary

Chartbrew before 5.2.2 has a DNS rebinding vulnerability. The server validates a target hostname but the actual connection performs a separate DNS lookup. An authenticated user who controls the DNS name can bypass protections and access internal services or localhost resources.

Detection Guidance

Detecting this vulnerability requires checking if Chartbrew versions prior to 5.2.2 are installed and if DNS rebinding protections are bypassed. Inspect server logs for outbound API connection attempts to private or internal addresses. Monitor DNS resolution logs for repeated queries to the same hostname resolving to different IPs during validation and request phases.

Impact Analysis

An attacker with access could exploit this to access internal services, localhost resources, or cloud metadata endpoints that should be restricted. This could lead to data breaches or unauthorized access to sensitive systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations may face compliance violations and penalties.

Mitigation Strategies

Upgrade Chartbrew to version 5.2.2 or later immediately. Review and restrict API connection configurations to prevent unauthorized outbound requests. Implement network-level controls to block DNS rebinding attacks, such as DNS filtering or firewall rules that prevent internal IP resolution from external DNS responses.

Hi! I’m here to help you understand CVE-2026-61743. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70