CVE record · 1 source
CVE-2026-116243
CVSS 7.5pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences.
- Vendor
- Pgadmin.Org
- Product
- pgAdmin 4
- CVSS v3.1
- 7.5 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-426, CWE-427
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences.
pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server mode the binary path was refused only when it lay under the per-user storage directory (STORAGE_DIR), not…