Read-Only Transaction Bypass in pgAdmin 4 AI Assistant

CVE-2026-12045

What is CVE-2026-12045?

The pgAdmin 4 AI Assistant contains a vulnerability that allows attackers to bypass read-only transactions, enabling them to execute arbitrary SQL queries with the privileges of the pgAdmin user's database role. By exploiting prompt injection techniques, an attacker can craft multi-statement payloads that manipulate the transaction control, allowing unauthorized data modification within the database. If the user's role has escalated privileges, such as being a PostgreSQL superuser, the attacker can potentially achieve remote code execution on the database server host. To resolve this issue, a fix has been implemented that strictly validates LLM-supplied queries, ensuring they conform to a single read-only statement and rejecting any harmful transaction-control verbs or data modification commands.

References