# CVE-2026-69128: Chartbrew AI SQL blocklist bypass in PostgreSQL query validation

Source: https://junglewise.ai/threats/cve-2026-69128-chartbrew-is-an-open-source-web-application-that-can-connect  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-06. Updated: 2026-11-06  
License: CC BY 4.0 with a link back

CVE-2026-69128 · Severity: info · Published 2026-11-06

Chartbrew is an open-source analytics platform that connects to databases to create charts. In version 5.2.2, the AI-powered query tool's safeguards against malicious SQL were incomplete, allowing privileged users (team Owners or Admins) to bypass protections and read arbitrary files from the database server. An attacker with elevated privileges could extract sensitive data like configuration files or credentials stored on the PostgreSQL server.

Technologies: [Chartbrew](https://junglewise.ai/threats/technologies/chartbrew-chartbrew). Vendors: [Chartbrew](https://junglewise.ai/threats/vendors/chartbrew).

## Quick answers

**Is CVE-2026-69128 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-69128 being exploited in the wild.

**How severe is CVE-2026-69128?** Informational severity, published 6 November 2026.

**Which products and versions are affected?** Chartbrew 5.2.2.

**Is there a fix for CVE-2026-69128?** Yes: fixed in 5.2.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-69128 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-69128?** Check whether you run Chartbrew at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 5.2.3

## Technical details

The vulnerability exists in the AI query tool's SQL blocklist for PostgreSQL, which used incomplete regular expressions that missed both sibling filesystem functions (pg_stat_file, pg_ls_logdir, etc.) and double-quoted identifier forms of blocked functions (e.g., "pg_read_file"()). An attacker with Owner or Admin privileges who can enable AI features on a PostgreSQL connection can craft queries using these bypasses to invoke file-reading functions, potentially reading files readable by the PostgreSQL OS user account. The fix consolidates the blocklist into a single family-prefix pattern that covers all pg_read*, pg_stat*, pg_ls*, and pg_current_logfile variants with optional quote-matching.

## Affected products

- Chartbrew Chartbrew 5.2.2

## Timeline

- 2026-11-06: disclosed
- 2026-07-19: patched: Release v5.2.3

## References

- [https://github.com/chartbrew/chartbrew/commit/b83f656a8757beccba461f0f6c5abb1a25dc3b4c](https://github.com/chartbrew/chartbrew/commit/b83f656a8757beccba461f0f6c5abb1a25dc3b4c)
- [https://github.com/chartbrew/chartbrew/releases/tag/v5.2.3](https://github.com/chartbrew/chartbrew/releases/tag/v5.2.3)

## Related threats

- [Chartbrew API connection private host bypass](https://junglewise.ai/threats/cve-2026-68935-chartbrew-is-an-open-source-web-application-for-creating-charts)
- [Chartbrew dashboard password brute force via plaintext storage](https://junglewise.ai/threats/cve-2026-68933-chartbrew-is-an-open-source-web-application-that-can-connect)
- [Chartbrew BullMQ dashboard authentication bypass](https://junglewise.ai/threats/cve-2026-86005-chartbrew-is-an-open-source-web-application-that-can-connect)
- [Chartbrew arbitrary file deletion via connection cleanup](https://junglewise.ai/threats/cve-2026-85736-chartbrew-is-an-open-source-web-application-that-can-connect)
- [Chartbrew MongoDB query injection in date-typed variables](https://junglewise.ai/threats/cve-2026-85726-chartbrew-is-an-open-source-web-application-that-can-connect)