Executive brief
pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
Affected products
- PyPI pgadmin4
Junglewise Threat Intelligence
CVE-2024-2044: PYSEC-2026-453 - pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
CVE-2024-2044 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: pgadmin4 (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2864 - pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
- PYSEC-2026-1773 - pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification
- PYSEC-2026-1772 - pgAdmin is affected by an LDAP injection vulnerability
- PYSEC-2026-1776 - pgAdmin 4 has command injection vulnerability on Windows systems
- PYSEC-2026-1769 - pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability