7.4
High
CVE-2026-1707 pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when…
Description
pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict <key>`. This results in reliable command execution on the pgAdmin host during the restore operation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pgAdmin 4 | 9.11 | No fix stated |
Other CVEs of pgAdmin 4
The 56 CVEs of pgAdmin 4 →
CVE-2026-116252
pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name
6.5
Medium
CVE-2026-116251
pgAdmin 4: A user's other sessions survive a change of their password
4.2
Medium
CVE-2026-116249
pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory
8.4
High
CVE-2026-116250
pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check
6.5
Medium