CVSS 3.1
7.9 highCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:LCVE-2025-9636
High (7.9) in pgadmin pgadmin 4. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in pgadmin4 9.8.
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
- CWE
- CWE-346
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pgadmin:pgadmin_4
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6859-2qxq-ffv2 | PyPI | pgadmin4 | <9.8 | 9.8 |
| PYSEC-2026-1769 | PyPI | pgadmin4 | <9.8 | 9.8 |