{"id":"CVE-2025-13780","published":"2025-12-11T18:30:47Z","modified":"2026-02-26T16:07:46Z","title":"Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)","vendor":"pgadmin.org","product":"pgAdmin 4","tier":"tail","description":{"text":"pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00943,"percentile":0.61037,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://github.com/pgadmin-org/pgadmin4/issues/9368","tags":["issue-tracking"]}],"priority":{"score":23.6,"factors":[{"name":"EPSS percentile","points":12.21},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.37}]},"exploitSources":{"pocGithub":{"count":3,"skipped":0,"earliest":"2025-12-12","earliestUrl":"https://github.com/zeropwn/pgadmin4-9.10-CVE-2025-13780","repos":[{"name":"zeropwn/pgadmin4-9.10-CVE-2025-13780","url":"https://github.com/zeropwn/pgadmin4-9.10-CVE-2025-13780","stars":14,"created":"2025-12-12"},{"name":"ThemeHackers/CVE-2025-13780","url":"https://github.com/ThemeHackers/CVE-2025-13780","stars":3,"created":"2025-12-17"},{"name":"meenakshisl/PoC-CVE-2025-13780","url":"https://github.com/meenakshisl/PoC-CVE-2025-13780","stars":0,"created":"2025-12-12"}]},"first":{"date":"2025-12-12","source":"PoC-in-GitHub","url":"https://github.com/zeropwn/pgadmin4-9.10-CVE-2025-13780"},"provenance":"source"},"vendorSlug":"pgadmin-org","affectedVersions":[{"vendor":"pgadmin.org","product":"pgAdmin 4","versions":["<= 9.10"]}],"affected":[{"ecosystem":"PyPI","package":"pgadmin4","vulnerableRanges":["<9.11"],"patched":["9.11"],"from":["GHSA-fxmw-jcgr-w44v","PYSEC-2026-450"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-202720","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2025-12763","published":"2025-11-13","fixed":"9.10","kev":false},{"cve":"CVE-2025-12764","published":"2025-11-13","fixed":"9.10","kev":false},{"cve":"CVE-2025-12765","published":"2025-11-13","fixed":"9.10","kev":false},{"cve":"CVE-2025-13780","published":"2025-12-11","fixed":"9.11","kev":false},{"cve":"CVE-2026-1707","published":"2026-02-05","fixed":"9.12","kev":false,"link":{"from":"CVE-2025-13780","to":"CVE-2026-1707","relation":"successor","confidence":"high","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:pgadmin4","fromFixed":"9.11","toFixed":"9.12","daysApart":56},{"kind":"same-code","provenance":"machine","files":["web/pgadmin/tools/restore/__init__.py"],"commits":["https://github.com/pgadmin-org/pgadmin4/commit/1d397395f75320ca1d4ed5e9ca721c603415e836","https://github.com/pgadmin-org/pgadmin4/commit/d5a909f14cb9713d89b49481ad1929fad89f4576","https://github.com/pgadmin-org/pgadmin4/commit/62e2d18b0261f88086db65059a6078db07169f18"],"basis":"shared file"}]}},{"cve":"CVE-2026-7813","published":"2026-05-11","fixed":"9.15","kev":false},{"cve":"CVE-2026-7814","published":"2026-05-11","fixed":"9.15","kev":false}],"package":"PyPI:pgadmin4"}}