CVE-2024-9014

6.5 mediumEPSS 9.7%

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 9.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2024-09-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pgadmin:pgadmin_4

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-jm9x-rx9x-wpqj	PyPI	pgadmin4	<8.12	8.12
PYSEC-2026-1775	PyPI	pgadmin4	<8.12	8.12

References

https://github.com/pgadmin-org/pgadmin4/issues/7945

Check your stack JSON