Description
pgAdmin <= 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised access to the installation directory on the Debian or RHEL 8 platforms.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pgadmin.org | pgAdmin 4 | < 8.9 | 8.9 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | pgadmin4 | 9.2-1.1 | openSUSE-SU-2025:14983-1 |
Advisories 2
- openSUSE-SU-2025:14983-1 pgadmin4-9.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-1452 pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Apr 13, 2025
References
- https://github.com/pgadmin-org/pgadmin4/issues/7605 issue-tracking