Skip to content
Sign in
7.4 High

CVE-2024-3116 pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API

Description

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.

Affected products and versions

Product Affected versions Fixed in
pgAdmin 4 8.5 earliest → < 8.5 8.5
pgadmin_4 8.5 earliest → < 8.5 8.5

Other CVEs of pgAdmin 4

The 56 CVEs of pgAdmin 4 →
CVE-2026-116252 pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name 6.5 Medium CVE-2026-116251 pgAdmin 4: A user's other sessions survive a change of their password 4.2 Medium CVE-2026-116249 pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory 8.4 High CVE-2026-116250 pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check 6.5 Medium
Track this CVE