{"id":"CVE-2025-12762","published":"2025-11-13T13:00:02Z","modified":"2026-02-26T16:57:07Z","title":"Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)","vendor":"pgadmin.org","product":"pgAdmin 4","tier":"tail","description":{"text":"pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.12705,"percentile":0.96264,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://github.com/pgadmin-org/pgadmin4/issues/9320","tags":["issue-tracking"]}],"priority":{"score":30.6,"factors":[{"name":"EPSS percentile","points":19.25},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.37}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2025-11-24","earliestUrl":"https://github.com/djayaGit/Blackash-CVE-2025-12762","repos":[{"name":"djayaGit/Blackash-CVE-2025-12762","url":"https://github.com/djayaGit/Blackash-CVE-2025-12762","stars":0,"created":"2025-11-24"}]},"first":{"date":"2025-11-24","source":"PoC-in-GitHub","url":"https://github.com/djayaGit/Blackash-CVE-2025-12762"},"provenance":"source"},"vendorSlug":"pgadmin-org","affectedVersions":[{"vendor":"pgadmin.org","product":"pgAdmin 4","versions":["<= 9.9"]}],"affected":[{"ecosystem":"PyPI","package":"pgadmin4","vulnerableRanges":["<9.10"],"patched":["9.10"],"from":["GHSA-w2p4-p4rh-qcm3","PYSEC-2026-454"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-169296","exploited":false,"provenance":"source"}}