CVE-2026-1707: Restore restriction bypass via key disclosure vulnerability (pgAdmin 4)
pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the \restrict key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using \unrestrict <key>. This results in reliable command execution on the pgAdmin host during the restore operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1707?
CVE-2026-1707 has a medium severity rating due to its potential impact on data confidentiality.
How do I fix CVE-2026-1707?
To fix CVE-2026-1707, upgrade to pgAdmin version 9.12 or later.
What versions are affected by CVE-2026-1707?
pgAdmin versions prior to 9.12 are affected by CVE-2026-1707.
What type of vulnerability is CVE-2026-1707?
CVE-2026-1707 is classified as a restore restriction bypass vulnerability.
Can an attacker exploit CVE-2026-1707 remotely?
Yes, an attacker can exploit CVE-2026-1707 remotely if they have access to the pgAdmin server.