Critical 9.4 CVSS pgAdmin 4 Flaws Enable Full OS Command Execution

pgAdmin released version 9.15 to fix multiple high-severity vulnerabilities affecting all versions prior to 9.15, including authorization bypasses, privilege escalation via writable passexec_cmd, SQL injection that can escalate to OS command execution (COPY … TO PROGRAM), unsafe session deserialization leading to RCE, SSRF via LLM API config, and path traversal in the File Manager; administrators are urged to upgrade immediately.