CVE-2026-7818

A flaw was found in pgadmin4. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directory was deserialized unconditionally. An authenticat...