CVE-2026-54349 | Chartbrew up to 5.2.0 SQL Dashboard Variable Substitution applyMysqlOrPostgresVariables code injection

November 7, 2026 Yanac

A vulnerability labeled as critical has been found in Chartbrew up to 5.2.0. This affects the function applyMysqlOrPostgresVariables of the component SQL Dashboard Variable Substitution. Executing a manipulation can lead to code injection.

This vulnerability appears as CVE-2026-54349. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More