Skip to content

CVE record · 1 source

CVE-2026-116240

CVSS 6.5

In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the absolute path with…

Vendor: Pgadmin.Org
Product: pgAdmin 4
CVSS v3.1: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-22, CWE-367

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

9

CVE NVD 37h ago

In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the absolute path with…

In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the absolute path with get_abs_path(). Several callers then acted on a path they built differently, so the…

CVSS 6.5 CVE-2026-116240 Pgadmin.Org