CVE-2026-7817: pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints
Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.
User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by pointing apikeyfile at any path readable by the pgAdmin process, or coerce pgAdmin into making requests to internal targets (e.g. cloud metadata services such as 169.254.169.254) by setting apiurl, exploiting the chat path and model-list endpoints.
Fix restricts apikeyfile to the user's private storage (server mode) or home directory (desktop mode), enforces a printable-ASCII key shape and a 1024-byte read cap, and gates apiurl against a configurable allow-list (config.ALLOWEDLLMAPIURLS) at every entry point.
This issue affects pgAdmin 4: before 9.15.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pgAdmin 4to a version that resolves this vulnerability.Fixed in 9.15 - Configuration
Validate api_key_file to allow only paths in the user's private storage (server mode) or home directory (desktop mode). Enforce that the API key matches a printable-ASCII shape and cap reads to 1024 bytes.
pgAdmin 4 LLM API configuration endpoints api_key_file = restricted to user's private storage (server mode) or home directory (desktop mode) + printable-ASCII key shape + 1024-byte read cap - Configuration
Validate api_url against the configurable allow-list config.ALLOWED_LLM_API_URLS at every entry point (including chat path and model-list endpoints) to prevent SSRF to internal targets (e.g., 169.254.169.254).
pgAdmin 4 LLM API configuration endpoints api_url = gated by config.ALLOWED_LLM_API_URLS allow-list at every entry point
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7817?
The severity of CVE-2026-7817 is rated high with a score of 7.1.
What vulnerabilities are associated with CVE-2026-7817?
CVE-2026-7817 involves local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities.
How do I fix CVE-2026-7817?
A patch is available to remediate the vulnerabilities in CVE-2026-7817.
What can an attacker do with CVE-2026-7817?
An authenticated attacker could read arbitrary server-side files due to the vulnerabilities in CVE-2026-7817.
Which software is affected by CVE-2026-7817?
The affected software for CVE-2026-7817 is pgAdmin 4.