{"id":"CVE-2024-3116","published":"2024-04-04T14:59:37Z","modified":"2025-03-14T16:35:25Z","title":"Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4","vendor":"pgadmin.org","product":"pgAdmin 4","tier":"core","eol":null,"affectedVersions":[{"vendor":"pgadmin.org","product":"pgAdmin 4","versions":["< 8.5"]}],"description":{"text":"pgAdmin <= 8.4 is affected by a  Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the underlying data.","provenance":"source","from":"CVE.org"},"summary":{"text":"pgAdmin 4 versions up to and including 8.4 contain a command injection flaw in the validate binary path API, which allows arbitrary code to be executed on the server hosting pgAdmin. An attacker who can reach the API over the network and holds low-privilege authenticated access can trigger the flaw without any user interaction, with the code running in the context of the pgAdmin server.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:20Z"},"cvss":{"score":7.4,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.65815,"percentile":0.99268,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"}],"references":[{"url":"https://github.com/pgadmin-org/pgadmin4/issues/7326","tags":["issue-tracking"]},{"url":"https://gist.github.com/aelmokhtar/689a8be7e3bd535ec01992d8ec7b2b98","tags":["mitigation"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIF5T34JTTYRGIN5YPT366BDFG6452A2/","tags":[]},{"url":"https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-pgadmin-cve-2024-3116","tags":[]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"PyPI","package":"pgadmin4","vulnerableRanges":["<8.5"],"patched":["8.5"],"from":["GHSA-27jx-ffw8-xrqv","PYSEC-2026-1767"],"provenance":"source"}],"advisories":[{"id":"GHSA-27jx-ffw8-xrqv","url":"https://github.com/advisories/GHSA-27jx-ffw8-xrqv","severity":"HIGH","ecosystem":"PyPI","package":"pgadmin4","vulnerableRanges":["<8.5"],"patched":["8.5"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2024-1054","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-1054","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2024-04-07","earliestUrl":"https://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4","repos":[{"name":"TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4","url":"https://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4","stars":13,"created":"2024-04-07"}]},"metasploit":[{"name":"pgAdmin Binary Path API RCE","module":"exploit/windows/http/pgadmin_binary_path_api","type":"exploit","disclosureDate":"2024-03-28","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pgadmin_binary_path_api.rb"}],"first":{"date":"2024-03-28","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pgadmin_binary_path_api.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-03-28","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2024-04-07","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pgadmin_binary_path_api.rb","provenance":"source"},{"date":"2024-04-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-3116","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":30.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.85,"detail":"percentile 0.9927"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.18,"detail":"base score 7.4"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-pgadmin-org-pgadmin-4-cve-2022-0959","children":[{"from":"CVE-2024-3116","to":"CVE-2024-4215","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:pgadmin4","fromFixed":"8.5","toFixed":"8.6","daysApart":28},{"kind":"same-code","provenance":"machine","files":["web/pgadmin/misc/__init__.py"],"commits":["https://github.com/pgadmin-org/pgadmin4/commit/fbbbfe22dd468bcfef1e1f833ec32289a6e56a8b","https://github.com/pgadmin-org/pgadmin4/commit/f4761f55f7cf6d56d6c5129f921393b0b47fd976"],"basis":"shared function","functions":["validate_binary_path"]}]},{"from":"CVE-2024-3116","to":"CVE-2024-4216","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["web/pgadmin/browser/templates/browser/js/utils.js"],"commits":["https://github.com/pgadmin-org/pgadmin4/commit/fbbbfe22dd468bcfef1e1f833ec32289a6e56a8b","https://github.com/pgadmin-org/pgadmin4/commit/e384c9665ae2e72376be7cefa8e652efcee93767"],"basis":"rarely changed file"}]},{"from":"CVE-2024-3116","to":"CVE-2025-9636","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["web/config.py"],"commits":["https://github.com/pgadmin-org/pgadmin4/commit/fbbbfe22dd468bcfef1e1f833ec32289a6e56a8b","https://github.com/pgadmin-org/pgadmin4/commit/cdeb18fcbb139a200b5a4779c82f9cd1aaaf3c89"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2023-0241","published":"2023-03-27","fixed":"6.19","kev":false},{"cve":"CVE-2023-1907","published":"2025-01-09","fixed":"7.0","kev":false},{"cve":"CVE-2023-5002","published":"2023-09-22","fixed":"7.7","kev":false},{"cve":"CVE-2024-3116","published":"2024-04-04","fixed":"8.5","kev":false},{"cve":"CVE-2024-4215","published":"2024-05-02","fixed":"8.6","kev":false},{"cve":"CVE-2024-9014","published":"2024-09-23","fixed":"8.12","kev":false},{"cve":"CVE-2025-2945","published":"2025-04-03","fixed":"9.2","kev":false}],"package":"PyPI:pgadmin4"}}