PgAdmin Security Update Advisory (CVE-2025-12762)

Overview

 

We have released a security update to address a vulnerability in pgAdmin. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-12762

 

PgAdmin Version: 9.9 and earlier

 

 

Resolved Vulnerabilities

 

Remote code execution vulnerability in the PLAIN SQL file restore function in pgAdmin (CVE-2025-12762)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-12762

 

PgAdmin Version: 9.10

 

 

References

 

[1] Block the restore if the PLAIN SQL file contains any meta-commands
https://github.com/pgadmin-org/pgadmin4/issues/9320