CVE-2025-9636
EUVD-2025-2672904.09.2025, 17:15
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| pgadmin | pgadmin_4 | 𝑥 ≤ 9.7 |
𝑥
= Vulnerable software versions
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pgadmin4 |
| ||||||||||||||||||||
| pgadmin4-doc |
| ||||||||||||||||||||
| pgadmin4-web |
| ||||||||||||||||||||
| system-user-pgadmin |
|
Common Weakness Enumeration