Description

pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.

INFO

Published Date :

2025-12-11T18:30:47.812Z

Last Modified :

2026-02-26T16:07:46.344Z

Source :

PostgreSQL
AFFECTED PRODUCTS

The following products are affected by CVE-2025-13780 vulnerability.

Vendors Products
Pgadmin
  • Pgadmin 4
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-13780.

URL Resource
https://github.com/pgadmin-org/pgadmin4/issues/9368 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact