CVE-2026-69128

Chartbrew’s AI SQL tool can read PostgreSQL host files

Chartbrew · Chartbrew AI SQL tool

First documented disclosure · Review checkpoint

Summary

An AI database connection can expose files readable by PostgreSQL.

Severity and exploitation evidence

Medium · 4.6/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed public sources describe the vulnerability and its conditions. Malicious exploitation has not been established in the reviewed sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The AI query validator missed ways PostgreSQL exposes filesystem functions.

Conditions required

A team owner or administrator must use an AI-enabled PostgreSQL connection. Read access depends on the database account’s role.

Potential impact

The database can disclose files accessible to its operating-system account, with a narrower scope for ordinary roles.

Affected versions and configurations

5.2.2.

Fix and mitigation status

CNA lists 5.2.3. Maintainer advisory lists 5.3.0.

Practical next steps

Use 5.3.0 or later to satisfy both published fix boundaries and reduce database-role privileges.

Operating lesson

Limit the database role and allowed query operations independently of generated SQL validation.

Evidence and limits

The release notes mention stronger PostgreSQL checks in 5.2.3. The CVE description identifies 5.2.3 as fixed, while the maintainer advisory’s version table lists 5.3.0.

Sources