Kurz gesagt
- CVE-2025-12762 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in pgadmin4, pgadmin 4 (pgadmin).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 12.7%, höher als bei 96.3% aller Schwachstellen.
- Abhilfe: auf 9.10 oder neuer aktualisieren.
Description
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
NVD description
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free