CVE-2025-2945

🗓️ 03 Apr 2025 12:23:14Reported by PostgreSQLType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 273 Views🌐 WEB

Remote Code Execution vulnerability in pgAdmin 4 allows arbitrary code execution via unsafe POST endpoints.

Reporter	Title	Published	Views	Family All 33
GithubExploit	Exploit for CVE-2025-2945	13 Sep 202507:33	–	githubexploit
GithubExploit	Exploit for Code Injection in Pgadmin Pgadmin_4	26 Nov 202512:44	–	githubexploit
GithubExploit	Exploit for Code Injection in Pgadmin Pgadmin_4	16 Mar 202623:38	–	githubexploit
GithubExploit	Exploit for CVE-2025-2945	3 Jun 202518:17	–	githubexploit
ATTACKERKB	CVE-2025-2945	3 Apr 202513:15	–	attackerkb
BDU FSTEC	The vulnerability of the eval() function in Cloud Deployment modules and the Query Tool, a database management tool for pgAdmin 4, allows a hacker to execute arbitrary code.	28 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-2945	3 Apr 202512:35	–	circl
CNNVD	pgAdmin 安全漏洞	3 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-2945 pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment	3 Apr 202512:23	–	cvelist
F5 Networks	K000150987: PostgreSQL pgAdmin vulnerabilities CVE-2025-2945 and CVE-2025-2946	23 Apr 202507:21	–	f5

NVD

Node

pgadmin pgadmin_4Range<9.2postgresql

[
  {
    "defaultStatus": "affected",
    "modules": [
      "Query Tool",
      "Cloud Deployment"
    ],
    "product": "pgAdmin 4",
    "programFiles": [
      "https://github.com/pgadmin-org/pgadmin4/blob/master/web/pgadmin/tools/sqleditor/__init__.py",
      "https://github.com/pgadmin-org/pgadmin4/blob/master/web/pgacloud/providers/google.py"
    ],
    "repo": "https://github.com/pgadmin-org/pgadmin4",
    "vendor": "pgadmin.org",
    "versions": [
      {
        "lessThan": "9.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/pgadmin-org/pgadmin4/issues/8603

Parameter	Position	Path	Description	CWE
query_commited	request body	/sqleditor/query_tool/download/	Endpoint where user input is evaluated via Python eval(), enabling RCE when a crafted query_commited is submitted.	CWE-94
high_availability	request body	/cloud/deploy	Cloud Deployment endpoint that unsafely passes high_availability to eval(), enabling RCE.	CWE-94

17 Jun 2026 09:07Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.8 - 9.9

EPSS0.39067

SSVC

CWE-94