7.9
High
CVE-2025-9636 pgAdmin…
Description
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| pgAdmin 4 9.8 | earliest → < 9.8 | 9.8 |
Other CVEs of pgAdmin 4
The 56 CVEs of pgAdmin 4 →
CVE-2026-116252
pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name
6.5
Medium
CVE-2026-116251
pgAdmin 4: A user's other sessions survive a change of their password
4.2
Medium
CVE-2026-116249
pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory
8.4
High
CVE-2026-116250
pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check
6.5
Medium