1 matches found
CVE-2026-17566: Improper Neutralization of Special Elements used in an OS Command
pgAdmin 4's Import/Export Data tool builds a psql \copy ... command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql via --command. To stop an attacker from breaking out of the ... wrapper, createimportexportjob route POST...
9.9CVSS7.9AI score0.00673EPSS
SaveExploits1References5
20