pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities (CVE-2026-7817) | HOL Guard CVE

Medium · CVSS 6.5CVE-2026-7817GHSA-P58C-Q354-6C4F

pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities

Answer in brief

CVE-2026-7817 records a Medium severity (CVSS 6.5) vulnerability in pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities. The current sources do not mark it as known exploited. The current feed maps pgadmin4 (pypi). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published May 11, 2026Updated Sep 10, 2026Source checked Sep 10, 2026First seen by HOL Sep 10, 2026Material review Sep 10, 2026

Upstream Advisory

Key facts

Risk: Medium · CVSS 6.5
Exploitation: Not marked as known exploited
Affected software: 1 mapped package or product
Fix availability: Available

Why this deserves its current priority

CVSS is 6.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps pgadmin4 (pypi). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
pgadmin4pypi	>=0 <9.15	9.15

Recommended response

Check inventory. Check lockfiles and deployed manifests for pgadmin4.
Review the reported fix. Update pgadmin4 to 9.15 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
May 11, 2026
Evidence: source:osv:source_dates:source-dates:record
Source modified
Sep 10, 2026
Evidence: source:osv:source_dates:source-dates:record
First seen by HOL
Sep 10, 2026

Sources and claim methodology

Upstream source description

Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied api_key_file and api_url preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by pointing api_key_file at any path readable by the pgAdmin process, or coerce pgAdmin into making requests to internal targets (e.g. cloud metadata services such as 169.254.169.254) by setting api_url, exploiting the chat path and model-list endpoints. Fix restricts api_key_file to the user's private storage (server mode) or home directory (desktop mode), enforces a printable-ASCII key shape and a 1024-byte read cap, and gates api_url against a configurable allow-list (config.ALLOWED_LLM_API_URLS) at every entry point. This issue affects pgAdmin 4: before 9.15.

Quoted source text, attributed separately from HOL analysis.