PT-2026-66776

The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute sql query tool to parse, via sqlparse, as exactly one non-transaction-control statement before running it inside a BEGIN TRANSACTION READ ONLY wrapper. sqlparse's string-literal lexin...

Fedora 43 : pgadmin4 (2026-5938be3b09)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5938be3b09 advisory. Update to pgadmin-9.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2026-12045

creationtimestamp| type| source ---|---|--- 2026-06-19 03:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momhb5foco2g 2026-06-22 11:31:38+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moury636wf2b 2026-06-23 10:07:30+00:00| seen|...

CVE-2026-12045

Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that the assistant reads to execute arbitrary SQL with the privileges of the pgAdmin user's database role. The AI Assistant's executesqlquery tool runs LLM-generated SQL inside a BEGIN...