PYSEC-2026-2871
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/pgadmin4/PYSEC-2026-2871.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-2871
- Aliases
- Published
- 2026-07-13T15:15:44.937259Z
- Modified
- 2026-07-13T16:32:56.751622988Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
- Details
-
Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.
User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by pointing apikeyfile at any path readable by the pgAdmin process, or coerce pgAdmin into making requests to internal targets (e.g. cloud metadata services such as 169.254.169.254) by setting apiurl, exploiting the chat path and model-list endpoints.
Fix restricts apikeyfile to the user's private storage (server mode) or home directory (desktop mode), enforces a printable-ASCII key shape and a 1024-byte read cap, and gates apiurl against a configurable allow-list (config.ALLOWEDLLMAPIURLS) at every entry point.
This issue affects pgAdmin 4: before 9.15.
- References
Affected packages
PyPI / pgadmin4
Package
- Name
- pgadmin4
- View open source insights on deps.dev
- Purl
- pkg:pypi/pgadmin4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed9.15