pgadmin-org/pgadmin4 · Security
pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
- GHSA ID
- GHSA-6859-2qxq-ffv2
- CVE ID
- CVE-2025-9636
- Severity
- high
- Published
- Updated
- CVSS
- 7.9 · CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
- CVSS v3
- 7.9 · CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
Description
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
CWEs
- CWE-346 · Origin Validation Error