CVE-2026-116249 | pgAdmin up to 9.18 File Path Resolution/Connection Parameter servers.json get_complete_file_path/make_conninfo sslkeylogfile path traversal

October 30, 2026 Yanac

A vulnerability was found in pgAdmin up to 9.18. It has been declared as critical. Affected by this issue is the function get_complete_file_path/make_conninfo of the file servers.json of the component File Path Resolution/Connection Parameter Handler. Such manipulation of the argument sslkeylogfile leads to path traversal.

This vulnerability is documented as CVE-2026-116249. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More