Threats tagged 'ghsa-3jx6-4898-6q3m'

pgAdmin 4 versions before 9.19 contain a critical vulnerability in the Import/Export Data tool. The tool wraps user queries in a psql \copy (...) TO command and attempts to validate balanced parentheses to prevent command injection. However, it incorrectly handles backslashes inside double-quoted identifiers, allowing an attacker to bypass this check and inject a TO PROGRAM clause. This clause executes arbitrary commands on the pgAdmin host with the operating system privileges of the pgAdmin process. The vulnerability arises because the server setting standard_conforming_strings can be turned off by ordinary database roles, affecting how backslashes are interpreted, which pgAdmin does not reliably account for. This issue is a bypass of the previous fix for CVE-2026-17566.