CVE-2025-2945 PoC — pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

Source

https://github.com/Cycloctane/cve-2025-2945-poc

Associated Vulnerability

Title: pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment (CVE-2025-2945)
Description:Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules). The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution. This issue affects pgAdmin 4: before 9.2.

Description

Python PoC script for pgAdmin4 Query Tool Authenticated RCE (CVE-2025-2945)

Readme

# pgAdmin4 Query Tool Authenticated RCE PoC

Standalone python script to exploit pgAdmin4 query tool authenticated RCE vulnerability (CVE-2025-2945) in pgAdmin4 version 8.10 - 9.1.

Ported from Metasploit module: [pgadmin_query_tool_authenticated.rb](https://github.com/rapid7/metasploit-framework/blob/8ad35c05346b7caa94284e66e9045012dc3b8006/modules/exploits/multi/http/pgadmin_query_tool_authenticated.rb)

References:

- https://www.cve.org/CVERecord?id=CVE-2025-2945
- https://nvd.nist.gov/vuln/detail/CVE-2025-2945
- https://github.com/advisories/GHSA-g73c-fw68-pwx3

This software is designed for educational and research purposes only. The author is not responsible for any misuse of the code provided here.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →