Skip to content
fr Sign in
9.9 Critical

CVE-2024-9014 pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication

Description

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

Affected products and versions

Product Affected versions Fixed in
pgAdmin 4 8.12 earliest → < 8.12 8.12
pgadmin_4 8.12 earliest → < 8.12 8.12

References

Timeline

  1. Published
  2. Last modified

Other CVEs of pgAdmin 4

The 56 CVEs of pgAdmin 4 →
CVE-2026-116252 pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged 6.5 Medium CVE-2026-116251 pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own… 4.2 Medium CVE-2026-116249 In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file… 8.4 High CVE-2026-116250 In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with… 6.5 Medium
Track this CVE