PT-2026-39629 · Pgadmin 4+1 · Pgadmin 4+1
Fernando Bortotti
·
Published
2026-05-01
·
Updated
2026-07-13
·
CVE-2026-7819
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
pgAdmin 4 versions prior to 9.15
Description
A symbolic-link path traversal issue exists in the pgAdmin 4 File Manager. The
check access permission() function utilized os.path.abspath, which resolves parent directory references ('..') but fails to resolve symbolic links. Because the subsequent kernel write operation follows symbolic links, an authenticated user can create a symbolic link within their storage directory that points to a location outside of it. This allows the user to induce pgAdmin to write to any path accessible by the pgAdmin process. This is a Time-of-Check to Time-of-Use (TOCTOU) flaw, where a race condition exists between the access check and the actual file opening.Recommendations
Update to version 9.15 or later.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Pgadmin
Pgadmin 4