CVE-2022-4223: pgAdmin utility path validation API allows unauthenticated code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

high priorityUnauthenticated network-reachable code execution with high EPSS, though it requires user interaction and is not in KEV.

What it is

pgAdmin versions before 6.17 expose an HTTP API meant to validate the path to external PostgreSQL utilities like pg_dump and pg_restore. The API fails to properly secure the supplied path, so an unauthenticated caller can point it at an arbitrary location, including a UNC path to an attacker-controlled Windows server. The server then executes an appropriately named executable from that path, giving remote code execution on the pgAdmin host.

Impact

An attacker can execute arbitrary code with the privileges of the pgAdmin server process. On Windows this can be leveraged to run a malicious executable hosted on a remote share, leading to full compromise of the pgAdmin host and any PostgreSQL credentials it manages.

Attack surface

Reachable over the network through the pgAdmin HTTP API (AV:N, PR:N), but exploitation requires user interaction (UI:R), consistent with the CVSS vector. No authentication is needed to call the vulnerable endpoint.

Exploitation

Not listed in CISA KEV and no ransomware usage is documented, but EPSS is very high (0.80, ~99.6th percentile), indicating elevated likelihood of exploitation activity. Reference tags are only Third Party Advisory and Mailing List, so no public exploit code is confirmed by this record.

What to do

• Upgrade pgAdmin to 6.17 or later, which fixes the path validation API.
• If immediate upgrade is not possible, restrict network access to the pgAdmin server and its HTTP API to trusted administrators only.
• Block outbound SMB/UNC access from the pgAdmin host to prevent loading executables from attacker-controlled shares.
• Run pgAdmin with least privilege and avoid storing high-value PostgreSQL credentials in the instance.
• Monitor Fedora package updates for the patched pgAdmin build if installed via distribution packages.

Detection

• Monitor pgAdmin server logs and process creation for executions of pg_dump, pg_restore or similarly named binaries from unexpected or UNC paths.
• Alert on HTTP requests to the pgAdmin utility path-validation API from unauthenticated or unusual source addresses.
• Detect outbound SMB connections from the pgAdmin host to external or untrusted servers.
• Audit pgAdmin host process trees for child processes spawned by the pgAdmin service that do not match normal administrative activity.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.