This vulnerability affects pgAdmin 4 versions prior to 9.15 and involves improper validation of user-supplied api_key_file and api_url preferences in the LLM API configuration endpoints. An authenticated user could exploit this to perform local file inclusion by specifying arbitrary readable file paths, or conduct server-side request forgery by directing the server to make requests to internal network targets such as cloud metadata services. The fix implemented restricts api_key_file access to user private storage or home directories, enforces a printable ASCII key format with a 1024-byte read limit, and applies a configurable allow-list for api_url at all entry points.

Successful exploitation allows an authenticated user to read arbitrary files accessible by the pgAdmin process, potentially exposing sensitive information. Additionally, SSRF could enable the server to make unauthorized requests to internal services, which might lead to information disclosure or further internal network attacks. The CVSS score of 6.5 reflects a medium severity with high confidentiality impact but no integrity or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The described fix restricts file access and URL targets to mitigate the vulnerability. Users should upgrade to pgAdmin 4 version 9.15 or later once available. Until then, restrict access to authenticated users only and monitor for unusual activity related to LLM API configuration endpoints.