Critical pgAdmin Vulnerability Let Attackers Execute Shell Commands on the Host

A severe security vulnerability has been uncovered in pgAdmin 4, the popular open-source PostgreSQL database management tool. Tracked as CVE-2025-13780, this critical flaw allows attackers to bypass security filters and execute arbitrary shell commands on the host server. The issue stems from the application’s plain-text restore feature, which failed to block dangerous commands hidden in […]

The post Critical pgAdmin Vulnerability Let Attackers Execute Shell Commands on the Host appeared first on Cyber Security News.