CVE-2025-9636: pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability

September 5, 2025

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

References

github.com/advisories/GHSA-6859-2qxq-ffv2
github.com/pgadmin-org/pgadmin4
github.com/pgadmin-org/pgadmin4/commit/cdeb18fcbb139a200b5a4779c82f9cd1aaaf3c89
github.com/pgadmin-org/pgadmin4/issues/9114
nvd.nist.gov/vuln/detail/CVE-2025-9636

Code Behaviors & Features

Detect and mitigate CVE-2025-9636 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →