CVE-2026-17566
Description
A flaw was found in pgAdmin 4, a management tool for PostgreSQL databases. The Import/Export Data feature incorrectly processes certain user-provided SQL queries, specifically regarding how backslash characters are interpreted. This vulnerability allows an authenticated remote attacker, with specific permissions, to bypass security checks and execute unauthorized commands on the server running pgAdmin 4. Successful exploitation could lead to remote code execution, giving the attacker full control over the affected system.
Statement
This flaw does not affect Red Hat products, but only the Fedora community project.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
