CVE-2025-9636 — Cross-Origin Opener Policy Vulnerability in pgAdmin 4

CVE-2025-9636

Cross-Origin Opener Policy Vulnerability in pgAdmin 4 PUBLISHED

Description (CNA)

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

Affected (CNA)

Vendor / product	Versions
pgadmin.org / pgAdmin 4	affected 0 before 9.8

CWE

No CWE identifiers supplied.

References

https://github.com/pgadmin-org/pgadmin4/issues/9114

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.