Chartbrew, an open‑source data visualization platform, stores user‑supplied absolute file paths for SSL and SSH certificates in connection records. When a connection is removed or updated, the stored path is passed directly to the filesystem unlink function without any sanitization or restriction. If an attacker can create or update a connection with an arbitrary file path and then delete that connection, they trigger the unlink operation, causing the deletion of any file the process can access. The vulnerability was fixed in version 5.2.3 and can result in integrity loss of critical files such as configuration files or source code, leading to service disruption. This flaw corresponds to CWE‑73.

All deployments of Chartbrew running a version earlier than 5.2.3 are affected. The issue targets the chartbrew:chartbrew product. If a deployment is not upgraded to 5.2.3 or later, the vulnerability persists.

The CVSS score is 8.1, indicating a high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Attackers must have createOwn and deleteOwn permissions on a team, which the default self‑signup process grants to teamOwner. Because the default container image runs as uid 0, any file reachable by the process can be deleted, giving the attacker destructive impact within the container. The likely attack vector is an authenticated user with these permissions on a Chartbrew instance that runs with root privileges. Exploitability is moderate because it requires only normal user actions within the application; however, the impact is severe due to privileged filesystem access.