---
id: CVE-2026-7817
aliases:
  - GHSA-p58c-q354-6c4f
  - PYSEC-2026-2871
title: >-
  pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery
  (SSRF) vulnerabilities
summary: >-
  pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery
  (SSRF) vulnerabilities
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
vendor: pgadmin4
product: pgadmin4
ecosystem: pip
affected:
  - pgadmin4 < 9.15
patched:
  - pgadmin4 9.15
published: '2026-05-11'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:50:47.222773255Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-p58c-q354-6c4f'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-7817'
  - url: 'https://github.com/pgadmin-org/pgadmin4/issues/9900'
  - url: 'https://github.com/pgadmin-org/pgadmin4/commit/24485fe96'
  - url: 'https://github.com/pgadmin-org/pgadmin4'
tags:
  - osv
  - pip
epss: 0.00217
epssPercentile: 0.12406
ingestedAt: '2026-07-13T18:58:01.240Z'
---

## Overview

Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.

User-supplied api_key_file and api_url preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by pointing api_key_file at any path readable by the pgAdmin process, or coerce pgAdmin into making requests to internal targets (e.g. cloud metadata services such as 169.254.169.254) by setting api_url, exploiting the chat path and model-list endpoints.

Fix restricts api_key_file to the user's private storage (server mode) or home directory (desktop mode), enforces a printable-ASCII key shape and a 1024-byte read cap, and gates api_url against a configurable allow-list (config.ALLOWED_LLM_API_URLS) at every entry point.

This issue affects pgAdmin 4: before 9.15.

## Affected packages

- `pgadmin4 < 9.15`

## Remediation

Upgrade to a patched release:

- `pgadmin4 9.15`