Security Advisory
CVE-2025-12763
6.8
MEDIUM
Vulnerability Description
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input.
Published Date
November 13, 2025
Official Source
NIST NVD Advisory