GHSA-P58C-Q354-6C4F高危已审查

pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities

OSV 1.4.0 · github-reviewed · 修改于 2026-05-18 22:51

发布时间

2026-05-12 02:31

GitHub 审查时间

2026-05-18 22:51

NVD 发布时间

2026-05-12 00:17

源文件

advisories/github-reviewed/2026/05/GHSA-p58c-q354-6c4f/GHSA-p58c-q354-6c4f.json

公告说明

Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.

User-supplied api_key_file and api_url preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by pointing api_key_file at any path readable by the pgAdmin process, or coerce pgAdmin into making requests to internal targets (e.g. cloud metadata services such as 169.254.169.254) by setting api_url, exploiting the chat path and model-list endpoints.

Fix restricts api_key_file to the user's private storage (server mode) or home directory (desktop mode), enforces a printable-ASCII key shape and a 1024-byte read cap, and gates api_url against a configurable allow-list (config.ALLOWED_LLM_API_URLS) at every entry point.

This issue affects pgAdmin 4: before 9.15.

受影响的软件包

PyPI

pgadmin4

ECOSYSTEM

标识信息

别名 / CVE

CVE-2026-7817

CWE

CWE-552

软件生态

PyPI

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS_V4

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

原始 OSV JSON

{
  "id": "GHSA-p58c-q354-6c4f",
  "aliases": [
    "CVE-2026-7817"
  ],
  "details": "Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.\n\nUser-supplied api_key_file and api_url preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by pointing api_key_file at any path readable by the pgAdmin process, or coerce pgAdmin into making requests to internal targets (e.g. cloud metadata services such as 169.254.169.254) by setting api_url, exploiting the chat path and model-list endpoints.\n\nFix restricts api_key_file to the user's private storage (server mode) or home directory (desktop mode), enforces a printable-ASCII key shape and a 1024-byte read cap, and gates api_url against a configurable allow-list (config.ALLOWED_LLM_API_URLS) at every entry point.\n\nThis issue affects pgAdmin 4: before 9.15.",
  "summary": "pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "9.15"
            }
          ]
        }
      ],
      "package": {
        "name": "pgadmin4",
        "ecosystem": "PyPI"
      }
    }
  ],
  "modified": "2026-05-18T14:51:08Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
    },
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
    }
  ],
  "published": "2026-05-11T18:31:44Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7817",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/pgadmin-org/pgadmin4/issues/9900",
      "type": "WEB"
    },
    {
      "url": "https://github.com/pgadmin-org/pgadmin4/commit/24485fe96",
      "type": "WEB"
    },
    {
      "url": "https://github.com/pgadmin-org/pgadmin4",
      "type": "PACKAGE"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-552"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "nvd_published_at": "2026-05-11T16:17:38Z",
    "github_reviewed_at": "2026-05-18T14:51:08Z"
  }
}