CVE-2025-9636
pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
7.9
HIGH
CVSS 3.1
EPSS 0.04%
Description
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.
How to fix CVE-2025-9636
To remediate CVE-2025-9636, upgrade the affected package to a fixed version below.
- —upgrade to 9.8 or later
Is CVE-2025-9636 being exploited?
Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 9.8
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.9 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L |