CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This repository contains a proof-of-concept script created for security research and authorized penetration testing involving the vulnerability CVE-2025-2945 , affecting certain versions of pgAdmin4. The issue allows an authenticated pgAdmin user wit...

CVE-2025-2945

CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...

cve-2025-2945-poc

pgAdmin4 Query Tool Authenticated RCE PoC Standalone python script to exploit pgAdmin4 query tool authenticated RCE vulnerability CVE-2025-2945 in pgAdmin4 version 8.10 - 9.1. Ported from Metasploit module: pgadminquerytoolauthenticated.rb References: https://vulners.com/cve/CVE-2025-2945...

CVE-2026-116241

A flaw was found in pgadmin4. This vulnerability allows an authenticated user to achieve arbitrary code execution on the underlying host running the application. By submitting a specially crafted export query with backslash-escaped quotes in the Import/Export Data feature, an attacker can exploit...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, kserve-pmmlserver, kserve-pmmlserver-fips, jupyter-base-notebook, kubeflow-jupyter-web-app, authentik, pgadmin4-fips, k8s-sidecar, dagster-fips, kserve-xgbserver-fips, open-webui, pgadmin4, datadog-agent-fips, kubeflow-pipelines,...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, kserve-pmmlserver, kserve-pmmlserver-fips, jupyter-base-notebook, kubeflow-jupyter-web-app, authentik, pgadmin4-fips, k8s-sidecar, dagster-fips, kserve-xgbserver-fips, open-webui, pgadmin4, datadog-agent-fips, kubeflow-pipelines,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, kserve-pmmlserver, kserve-pmmlserver-fips, jupyter-base-notebook, kubeflow-jupyter-web-app, authentik, pgadmin4-fips, k8s-sidecar, dagster-fips, kserve-xgbserver-fips, open-webui, pgadmin4, datadog-agent-fips, kubeflow-pipelines,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http-fips, kserve-pmmlserver, kserve-pmmlserver-fips, jupyter-base-notebook, kubeflow-jupyter-web-app, authentik, pgadmin4-fips, k8s-sidecar, dagster-fips, kserve-xgbserver-fips, open-webui, pgadmin4, datadog-agent-fips, kubeflow-pipelines,...

[SECURITY] Fedora 44 Update: pgadmin4-9.18-1.fc44

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

[SECURITY] Fedora 45 Update: pgadmin4-9.18-1.fc45

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Fedora 43 : pgadmin4 (2026-dddd2792e3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dddd2792e3 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : pgadmin4 (2026-035cf95dc5)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-035cf95dc5 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ROS-20260921-73-0136

The vulnerability in pgadmin4 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

GHSA-F66Q-9RF6-8795 vulnerabilities

Vulnerabilities for packages: pgadmin4, pgadmin4-fips...

OPENSUSE-SU-2026:11508-1 pgadmin4-9.17-1.1 on GA media

These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76434

These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 44 Update: pgadmin4-9.17-1.fc44

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Fedora 43 : pgadmin4 (2026-bacb14f76f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bacb14f76f advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : pgadmin4 (2026-f0550055a7)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f0550055a7 advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...