CVE-2025-12763 — Command injection vulnerability allowing arbitrary command execution on Windows
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operat…
Published: 2025-11-13 · CVSS: 6.8 · CVSS 3.1
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7