Skip to content
OpenAdvisories
High WID-SEC-2025-2593 4 CVEs

pgAdmin: Mehrere Schwachstellen

Published Nov 12, 2025 · Updated Jan 5, 2026 · Revision 4 · de-DE

Vendor: SUSE Product: Linux Product: openSUSE Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in pgAdmin ausnutzen, um beliebigen Code auszuführen, Betriebssystembefehle auszuführen oder die Authentifizierung zu umgehen.

Product

pgAdmin ist eine Verwaltungs- und Entwicklungsplattform für die PostgreSQL-Datenbank.

Vulnerabilities 4

  • Critical 9.1
    CVE-2025-12762 Public exploit EPSS 13%

    Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

    pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the se…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • High 7.5
    CVE-2025-12764

    pgAdmin 4: LDAP injection vulnerability in LDAP authentication flow.

    pgAdmin <= 9.9  is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing the DC/LDAP server and the client to process an unusual amount of data DOS.

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • High 7.5
    CVE-2025-12765

    pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass.

    pgAdmin <= 9.9  is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Medium 6.8
    CVE-2025-12763

    Command injection vulnerability allowing arbitrary command execution on Windows

    pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing special…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI

Revision history

  1. #4

    Neue Updates von SUSE aufgenommen

  2. #3

    Neue Updates von openSUSE aufgenommen

  3. #2

    Referenz(en) aufgenommen: EUVD-2025-169296, EUVD-2025-169295, EUVD-2025-169294, EUVD-2025-169293

  4. #1

    Initiale Fassung

References