Skip to content
OpenAdvisories
High WID-SEC-2026-1462 8 CVEs

pgAdmin: Mehrere Schwachstellen

Published May 11, 2026 · Updated Aug 16, 2026 · Revision 2 · de-DE

Vendor: SUSE Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in pgAdmin ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

pgAdmin ist eine Verwaltungs- und Entwicklungsplattform für die PostgreSQL-Datenbank.

Vulnerabilities 8

  • Critical 9.9
    CVE-2026-7813

    pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode

    Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user-owned objects without filtering by the requesting user's identity. An authentica…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • High 8.8
    CVE-2026-7815

    pgAdmin 4: SQL injection in Maintenance tool option values leading to remote code execution

    SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were concatenated directly into the rendered VACUUM/ANALYZE/REINDEX command and passed to…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • High 8.8
    CVE-2026-7816

    pgAdmin 4: OS command injection in Import/Export query export via psql metacommand breakout

    OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject ") TO PROGRAM 'cmd'" to break ou…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • High 8.1
    CVE-2026-7819

    pgAdmin 4: Symbolic-link path traversal in File Manager allows arbitrary file write

    Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_permission used os.path.abspath, which resolves '..' but does not resolve symbolic links, while the subsequent kernel write follows symlinks. An authenticated user could pla…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • High 7.0
    CVE-2026-7818

    pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution

    Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents (using Python's standard object-serialization module) before performing any HMAC integrity check. …

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Medium 6.5
    CVE-2026-7817

    pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints

    Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied api_key_file and api_url preferences were passed to the LLM provider clients without validation. An authenticated use…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Medium 6.5
    CVE-2026-7820

    pgAdmin 4: Account-lockout bypass via Flask-Security default /login view

    Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS only inside its custom /authenticate/login view. Flask-Security's default /login view, which is registered automatically by security.init_app…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Medium 4.8
    CVE-2026-7814

    pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer

    Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, etc.) were assigned to DOM elements via innerHTML, allowing crafted object name…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI

Revision history

  1. #2

    Neue Updates von openSUSE aufgenommen

  2. #1

    Initiale Fassung

References