GHSA-6859-2qxq-ffv2

pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2025-9636

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	pgadmin4	< 9.8	9.8

Details

As written in the advisory (Markdown source, shown as plain text).

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2025-9636 advisory
https://github.com/pgadmin-org/pgadmin4/issues/9114 web
https://github.com/pgadmin-org/pgadmin4/commit/cdeb18fcbb139a200b5a4779c82f9cd1aaaf3c89 web
https://github.com/pgadmin-org/pgadmin4 package