Skip to content

CVE record · 1 source

CVE-2026-116250

CVSS 6.5

In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and then opened it by…

Vendor: Pgadmin.Org
Product: pgAdmin 4
CVSS v3.1: 6.5 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness: CWE-59, CWE-367

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

9

CVE NVD 37h ago

In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and then opened it by…

In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and then opened it by name. Several places opened it with a plain open() or handed the path to a utility…

CVSS 6.5 CVE-2026-116250 Pgadmin.Org