Critical pgAdmin 4 Vulnerability Enables Remote Code Execution

First seen 15 Dec 2025, 10:46 UTC • Cybersecuritynews

•91% similarity •45

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability in pgAdmin 4 has been identified, allowing remote attackers to execute arbitrary shell commands on the host system. This flaw, tracked as CVE-2025-13780, arises from a weakness in the handling of database restoration files. Affected users are urged to take immediate action to mitigate potential risks.

ThreatCluster AI How this analysis works

Attack Flow

8 entities, 16 inferred relationships (STIX 2.1).

Technique (2)

Remote Code Execution
Zero-day Exploit

Vulnerability (2)

CVE-2025-13780
PgAdmin4 Vulnerability

Affected Platform (4)

PgAdmin
PgAdmin 4
PgAdmin4
PostgreSQL

Relationships

CVE-2025-13780 targets PgAdmin
CVE-2025-13780 targets PgAdmin 4
CVE-2025-13780 targets PgAdmin4
CVE-2025-13780 targets PostgreSQL
PgAdmin4 Vulnerability targets PgAdmin
PgAdmin4 Vulnerability targets PgAdmin 4
PgAdmin4 Vulnerability targets PgAdmin4
PgAdmin4 Vulnerability targets PostgreSQL
Remote Code Execution targets PgAdmin
Remote Code Execution targets PgAdmin 4
Remote Code Execution targets PgAdmin4
Remote Code Execution targets PostgreSQL
Zero-day Exploit targets PgAdmin
Zero-day Exploit targets PgAdmin 4
Zero-day Exploit targets PgAdmin4
Zero-day Exploit targets PostgreSQL

Community

Browse all →

Tracked Entities in This Story

PgAdmin PgAdmin 4 PgAdmin4 PostgreSQL

Critical pgAdmin 4 Vulnerability Enables Remote Code Execution

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story