Security Advisory

CVE-2025-12763

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-13 13:00:08

Last updated 2026-02-26 16:57:06

Assigner PostgreSQL

CVSS score 6.8

State PUBLISHED

Description

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input.

← Browse all CVEs View on cve.org ↗