CVE-2025-9636: Cross-Origin Opener Policy Vulnerability in pgAdmin 4
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9636?
The severity of CVE-2025-9636 is considered high due to its potential for unauthorized account access and privilege escalation.
How do I fix CVE-2025-9636?
To fix CVE-2025-9636, upgrade pgAdmin to a version later than 9.7 that addresses this Cross-Origin Opener Policy vulnerability.
What are the consequences of CVE-2025-9636?
CVE-2025-9636 can lead to unauthorized account access, account takeover, data breaches, and privilege escalation.
Which versions of pgAdmin are affected by CVE-2025-9636?
CVE-2025-9636 affects all versions of pgAdmin up to and including 9.7.
Is CVE-2025-9636 associated with any specific attack vector?
CVE-2025-9636 is associated with attacks that manipulate the OAuth flow due to the Cross-Origin Opener Policy vulnerability.