Threats tagged 'ghsa-949g-5qqm-q7xc'

pgAdmin 4 versions before 9.19 have a vulnerability in server mode SSH tunnel handling. The application used the sshtunnel library without restricting it to user-configured identity files, causing it to load unencrypted private keys and SSH configuration from the service account's ~/.ssh directory. This allowed any user to configure a tunnel using the service account's SSH keys and agent, potentially accessing hosts that accept those keys without their own credentials. The issue is fixed in version 9.19 by restricting tunnel authentication to only user-configured identity files or passwords, preventing fallback to the service account's SSH keys and configuration. Desktop mode remains unaffected.