Critical pgAdmin Vulnerability Let Attackers Execute Shell Commands on the Host

Cybersecuritynews •Abinaya • December 15, 2025

A severe security vulnerability has been uncovered in pgAdmin 4, the popular open-source PostgreSQL database management tool. Tracked as CVE-2025-13780, this critical flaw allows attackers to bypass security filters and execute arbitrary shell commands on the host server. The issue stems from the application’s plain-text restore feature, which failed to block dangerous commands hidden in […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical pgAdmin 4 Vulnerability Enables Remote Code Execution A critical vulnerability in pgAdmin 4 has been identified, allowing remote attackers to execute arbitrary shell commands on the host system. This flaw, tracked as CVE-2025-13780, arises from a weakness in the handling of database restoration files. Affected users are urged to take immediate action to mitigate potential risks. 4 sources 45

Extracted Entities

Critical pgAdmin Vulnerability Let Attackers Execute Shell Commands on the Host

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)