File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4CVE-2024-2044pgadmin.org · CVSS 9.9 · 79% likely

   CWE-31

2. pgAdmin 4: Utility binary path can point at a shared storage directoryCVE-2026-116243pgadmin.org · CVSS 7.5 · 0.3% likelycovered by CyberSIXT

   CWE-4261 article

3. pgAdmin 4: Symbolic-link path traversal in File Manager allows arbitrary file writeCVE-2026-7819pgadmin.org · CVSS 8.1 · 0.3% likely

   CWE-61

4. pgAdmin 4: File Manager and storage-path tools act on a different path from the one checkedCVE-2026-116240pgadmin.org · CVSS 6.5 · 0.3% likely

   CWE-22

5. pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpointsCVE-2026-7817pgadmin.org · CVSS 6.5 · 0.2% likely

   CWE-552

6. pgAdmin 4: Connection file paths and parameter keys escape the user's storage directoryCVE-2026-116249pgadmin.org · CVSS 8.4 · 0.2% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.