CVE-2026-12046

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 6.9 through 9.15

Description In server mode, two state-mutating endpoints in the SQL Editor blueprint are missing the @pga login required authentication decorator, allowing them to be accessed without an authenticated session. These endpoints are 'DELETE /sqleditor/close/' and 'POST /sqleditor/initialize/sqleditor/update connection///'. Both endpoints lead to a pickle.loads sink—the close endpoint via the close sqleditor session() function and the update connection endpoint via the check transaction status() function—which processes the session['gridData'][<trans id>]['command obj'] variable. This creates a deserialization of untrusted data path. Remote code execution is possible if an attacker can forge a server-side session file containing a malicious pickle payload, which requires knowledge of the Flask SECRET KEY and write access to the sessions/ directory on the host. If these conditions are met, the lack of authentication allows for arbitrary code execution under the account running the pgAdmin process, potentially leading to complete host compromise and database credential theft.

Recommendations Update pgAdmin 4 to version 9.16.