pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-9636US | — | — | ||
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unautho… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-6859-2qxq-ffv2ADVISORY
- https://github.com/pgadmin-org/pgadmin4PACKAGE
- https://github.com/pgadmin-org/pgadmin4/commit/cdeb18fcbb139a200b5a4779c82f9cd1aaaf3c89WEB
- https://github.com/pgadmin-org/pgadmin4/issues/9114WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-9636ADVISORY
- https://pypi.org/project/pgadmin4PACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan