Skip to main content

pgAdmin 4 CVE-2025-12762

CRITICAL
Code Injection (CWE-94)
2025-11-13 f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
RCE Code Injection Pgadmin 4 Pgadmin
9.8
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Authenticate to pgAdmin server mode
  2. Exploit
    Supply crafted PLAIN-format dump file
  3. Execution
    Trigger command injection during restore
  4. Impact
    Execute arbitrary commands on host

Vulnerability Assessment

Weakness
CWE
CWE-94
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Code injection prevention, sandbox exec
MITRE ATT&CK

2 techniques across 2 tactics: Execution, Initial Access

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Exploitation requires pgAdmin to be deployed in server mode (the multi-user/web deployment, not the default desktop mode) AND a restore operation to be performed against a PLAIN-format (SQL-text) dump file whose contents the attacker controls; the injected commands execute during that restore. Limiting factors: the vulnerable code path is only reached when server mode is configured and a restore of an attacker-influenced PLAIN dump is actually initiated, which in practice presupposes an authenticated pgAdmin user performing the restore - contradicting the input vector's PR:N/UI:N and meaningfully narrowing realistic attackers to those who can get a malicious dump restored.
Impact

Raw scoring presents this as critical: the input CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H yields 9.8 with full confidentiality, integrity and availability impact via network access and no stated privileges or user interaction. However, the real-world signals temper this. EPSS is only 0.16% (37th percentile), indicating low modeled probability of near-term exploitation; the CVE is NOT on CISA KEV (no confirmed active exploitation) and no public exploit code is referenced, so exploitation status is 'no public exploit identified at time of analysis.' There is also a notable conflict between the CVSS vector and the description: the vector claims PR:N/UI:N, but the described flaw only triggers 'when running in server mode and performing restores from PLAIN-format dump files,' which realistically requires an authenticated pgAdmin session and a deliberate restore action - verify authentication/interaction requirements with the vendor, as the published PR:N/UI:N appears over-stated. Net assessment: a genuinely serious code-injection RCE worth prompt patching for anyone running pgAdmin in server mode, but the low EPSS, absence of KEV/POC, and the non-default precondition (server mode + attacker-controlled PLAIN dump restore) make it a scheduled-priority fix rather than an emergency, despite the headline 9.8.
Exploit ScenarioDerived

An attacker-supplied PLAIN-format (SQL) dump file contains embedded commands; when a pgAdmin user restores that dump in server mode, the malicious content is executed on the server hosting pgAdmin, yielding arbitrary command execution against the database management host. No public proof-of-concept is referenced, and realistic exploitation depends on getting a crafted dump restored by a pgAdmin user.
Act Now Prioritize within 24-48h. Why: CRITICAL severity.
Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Oct 18, 2026

Remote code execution in pgAdmin 4 (versions up to and including 9.9) lets an attacker who can get a crafted PLAIN-format dump file restored through pgAdmin execute arbitrary commands on the host running the pgAdmin server. The vulnerable path only exists in server mode (the multi-user web deployment) and only triggers when a restore of attacker-influenced SQL-text content is actually initiated, which in practice requires an authenticated pgAdmin user with restore privileges - the vendor's upstream advisory scores this at 9.8 while our assessment applies PR:L for that reason. No public exploit code has been identified at time of analysis and there is no CISA KEV confirmation; EPSS is 0.16% (37th percentile), so mass exploitation is unlikely, but any multi-tenant pgAdmin server that lets lower-privileged users restore their own dump files should be treated as high risk.

Earlier versions of this analysis (1)
v1 Mar 28, 2026 - 19:22 CVSS 9.1

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RemediationAI

A vendor patch is available - upgrade pgAdmin 4 past version 9.9 to the fixed release named in the upstream advisory (https://github.com/pgadmin-org/pgadmin4/issues/9320); confirm the exact fixed build against the vendor's release notes before rolling out, since the input data confirms patch availability but not a specific version number. Where an immediate upgrade is not possible, the most effective control is to remove the attack path: restrict the restore feature to a small set of trusted administrative roles and do not grant it to ordinary or shared accounts, accepting that day-to-day users then lose self-service restore. Alternatively, disallow restores from user-supplied PLAIN-format files - require custom/tar archive formats or have DBAs restore from dumps staged on the server by an operator - which blocks the injection vector at the cost of extra manual process. Running pgAdmin so it cannot reach the database host with broad credentials (container isolation, dedicated low-privilege OS account, no host mounts, no docker socket) limits what injected commands can do, and moving single-user work to desktop mode eliminates the multi-user boundary entirely. As detection, review pgAdmin server logs for unexpected restore invocations against unusual PLAIN dump files and monitor for child processes spawned by the pgAdmin process.

Affected Packages

pypi pgadmin4 fix: 9.10

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in pypi

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

pgAdmin is the standard web-based administration and development platform for PostgreSQL, and its restore feature shells out to the PostgreSQL client utilities (psql/pg_restore) to replay a dump into a target database. PLAIN-format dumps are raw SQL text rather than an archive format, so the restore pipeline handles content that is entirely attacker-authored; CWE-94 (Improper Control of Generation of Code / Code Injection) captures the root cause: content from the dump reaches a command execution context without adequate neutralization, allowing injected commands to run with the privileges of the pgAdmin process rather than being confined to SQL statements executed by the database. The affected CPE, cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*, covers pgAdmin 4 releases on the PostgreSQL platform through 9.9. Deployment mode is the decisive precondition: the web/server mode (multi-user, containerized or reverse-proxied deployments) exposes the restore endpoint to other users, while the default desktop mode runs single-user on the administrator's own workstation and offers far less of a privilege boundary to cross.

Know when Pgadmin gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vuln.today AI 8.8 HIGH

Server-mode pgAdmin requires an authenticated session to perform a restore, so PR:L rather than PR:N; the attacker-controlled dump executes with full host impact (C:H/I:H/A:H).

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE 9.1 CRITICAL
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Updated
Oct 18, 2026 - 20:41 vuln.today
v2 - CVSS changed
CVSS changed
Oct 18, 2026 - 20:22 NVD
9.1 (CRITICAL) 9.8 (CRITICAL)
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Nov 13, 2025 - 13:15 nvd
CRITICAL 9.1

DescriptionNVD

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.

Executive ViewAI

Why It Matters

pgAdmin 4 server-mode deployments running version 9.9 or earlier contain a critical remote code execution vulnerability that a user with restore privileges could exploit by restoring a crafted PLAIN-format dump file, potentially compromising the host that runs the pgAdmin server. This matters to leadership because multi-tenant pgAdmin environments that allow lower-privileged users to restore their own files could face host takeover and lateral movement risk, although no public exploit code has been identified at time of analysis and CISA KEV does not list this issue.

Business Impact: High
Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score
0.2%
Top 63% exploitable
Prevalence
High
most widely used PostgreSQL administration tool across enterprises
Data Quality
6 sources
Confidence: High
NVD CVE.org EPSS Vendor GitHub VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity CRITICAL
CISA KEV No
Public POC No
EPSS 0.2%
Patch available Yes
Active threat No
Deciding rule
CRITICAL severity
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
High

Priority Score

49
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +49
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Code Injection CRITICAL

Code injection occurs when an application accepts user input and passes it directly into a language interpreter or evaluator without proper sanitization.

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

Affected Products (CPE)NVD

cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*

More in Pgadmin

View all
CVE-2025-2945 CRITICAL POC
9.9 Apr 03

pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
CVE-2024-2044 CRITICAL POC
9.9 Mar 07

pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling
CVE-2024-3116 CRITICAL POC
9.8 Apr 04

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. Rated cr
CVE-2022-4223 HIGH POC
8.8 Dec 13

The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external Post
CVE-2024-9014 MEDIUM POC
6.5 Sep 23

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. Rated medium severity (CVS
CVE-2026-17351 CRITICAL
9.4 Jul 31

SQL injection sandbox escape in pgAdmin 4's AI Assistant (versions 9.13 through 9.16) lets an attacker break out of the

CVE-2026-17566 CRITICAL POC
9.4 Jul 31

OS command injection in pgAdmin 4 (all versions before 9.18) lets an authenticated user with the commonly-granted tools_
CVE-2026-116241 CRITICAL
9.4 Oct 30

Command injection in pgAdmin 4 before 9.19 lets an authenticated, low-privileged database user execute arbitrary operati
CVE-2024-4216 MEDIUM POC
5.4 May 02

pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. Rated medium severity (CVS
CVE-2026-17349 CRITICAL
9.3 Jul 31

Cross-tenant credential theft in pgAdmin 4 (9.0 through 9.16) lets an authenticated non-owner user hijack another user's
CVE-2025-2946 CRITICAL
9.1 Apr 03

pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). Rated critical severity (CVSS 9.1
CVE-2025-12763 HIGH
8.8 Nov 13

Command injection in pgAdmin 4 versions up to 9.9 on Windows allows an attacker who can supply a crafted file path to th

Same weakness CWE-94 – Code Injection

View all
CVE-2023-3519 CRITICAL POC
9.8
CVE-2021-22205 CRITICAL POC
10.0
CVE-2012-0158 HIGH POC
8.8
CVE-2021-44529 CRITICAL POC
9.8
CVE-2014-6287 CRITICAL POC
9.8
CVE-2017-7494 CRITICAL POC
9.8
CVE-2013-3906 HIGH POC
7.8
CVE-2017-9822 HIGH POC
8.8

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Vendor StatusVendor

SUSE

Severity: Critical
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Module for Python 3 15 SP7 Fixed
SUSE Linux Enterprise Server 15 SP7 Fixed

References

Advisories & patches
ADVISORY https://github.com/pgadmin-org/pgadmin4/issues/9320 ADVISORY https://vuldb.com/vuln/332355

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy