PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-17351 pgadmin.org CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-31T16:16:59.807Z and has not been modified since then. The NVD entry is currently Received. This critical vulnerability in pgAdmin 4 arises from a discrepancy between sqlparse's string-literal lexing and PostgreSQL's parser, allowing an attacker to smuggle a COMMIT statement within a query and bypass the fix for CVE-2026-12045. The issue is exacerbated by psycopg3's PrepareManager behavior with default settings. The fix involves setting conn.prepare_threshold = 0 on the dedicated read-only connection used by the AI Assistant tool. Developers and administrators using pgAdmin 4 versions between 9.13 and 9.16 should be aware of this critical vulnerability, which could lead to unauthorized data modifications and potential system compromise via indirect prompt-injection delivery. The vulnerability allows for a write/RCE bypass, highlighting the need for immediate attention and mitigation.

Vendor
pgadmin.org
Product
pgAdmin 4
CVSS
CRITICAL 9.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-31
Original CVE updated
2026-07-31
Advisory published
2026-07-31
Advisory updated
2026-07-31

Who should care

Developers and administrators using pgAdmin 4 versions between 9.13 and 9.16 should be aware of this critical vulnerability. The vulnerability could lead to unauthorized data modifications and potential system compromise via indirect prompt-injection delivery.

Technical summary

The vulnerability in pgAdmin 4 arises from a discrepancy between sqlparse's string-literal lexing and PostgreSQL's parser. An attacker can smuggle a COMMIT statement within a query, bypassing the fix for CVE-2026-12045. The issue is exacerbated by psycopg3's PrepareManager behavior with default settings. The fix involves setting conn.prepare_threshold = 0 on the dedicated read-only connection used by the AI Assistant tool.

Defensive priority

This critical vulnerability requires immediate attention from developers and administrators using pgAdmin 4 versions between 9.13 and 9.16. The vulnerability allows for a write/RCE bypass via indirect prompt-injection delivery, which could lead to unauthorized data modifications and potential system compromise.

Recommended defensive actions

  • Upgrade to pgAdmin 4 version 9.17 or later
  • Review and adjust server configurations to ensure prepare_threshold is set appropriately
  • Implement additional monitoring and validation for AI Assistant tool queries
  • Consider compensating controls such as Web Application Firewalls
  • Inventory and patch vulnerable pgAdmin 4 instances

Evidence notes

The issue arises from a discrepancy between sqlparse's string-literal lexing and PostgreSQL's parser under standard_conforming_strings = on. This allows an attacker to smuggle a COMMIT statement within a seemingly innocuous query, effectively bypassing the intended fix for CVE-2026-12045. The vulnerability is exacerbated by psycopg3's PrepareManager ignoring the prepare argument when the connection's prepare_threshold is None, which is the default in pgAdmin 4.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-31T16:16:59.807Z and has not been modified since then.