Critical pgAdmin Flaw Allows Attackers to Execute Shell Commands on Host

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical pgAdmin 4 Vulnerability Enables Remote Code Execution A critical vulnerability in pgAdmin 4 has been identified, allowing remote attackers to execute arbitrary shell commands on the host system. This flaw, tracked as CVE-2025-13780, arises from a weakness in the handling of database restoration files. Affected users are urged to take immediate action to mitigate potential risks. 4 sources 45