Chartbrew is an open‑source web application that can connect directly to databases and APIs. Prior to version 5.2.2, the runQuery tool interpolated the AI‑driven row_limit parameter directly into a SQL LIMIT clause without validating that the value is an integer. Because the read‑only keyword check occurs before the value is appended, an authenticated user able to influence a model‑generated non‑integer row_limit can inject arbitrary SQL that bypasses earlier checks. Successful exploitation enables the attacker to execute arbitrary statements against the connected database, including reading or altering data, and, if database permissions allow, accessing files or executing operating‑system commands.

The vulnerable component is part of Chartbrew, the open‑source web application. All installations running a version older than 5.2.2 are affected. The flaw resides in the server/modules/ai/orchestrator/tools/runQuery.js module.

The CVSS score of 5.8 indicates a moderate severity. The EPSS score is not available, so the likelihood of exploitation in the wild is uncertain, but the vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires that the attacker possesses an authenticated account with the ability to influence the AI tool’s row_limit parameter, which allows injection of malicious SQL. Once injected, the attacker can read or modify data and, if database permissions are permissive, can read arbitrary files or execute OS commands. Therefore, while the overall risk is moderate, the potential impact is significant.