CVE-2026-116243

In pgAdmin 4 versions before 9.19, a vulnerability exists where the application failed to block utility binary paths (for pg_dump, pg_restore, pg_dumpall, and psql) pointing to a SHARED_STORAGE directory. Because ordinary users can upload files to shared storage, an attacker could upload an execu...