Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2025-9636

Cross-Origin Opener Policy Vulnerability in pgAdmin 4

Description

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pgadmin.org pgAdmin 4

Default version status: affected

  • 0 to < 9.8affected

References