Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-2945_PgAdmin_PoC — pgAdmin Proof of Concept | Kitploit
Tools/GitHubGitHub/abrewer251/cve-2025-2945_pgadmin_poc
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubabrewer251/cve-2025-2945_pgadmin_poc

CVE-2025-2945_PgAdmin_PoC

pgAdmin Proof of Concept

View Repository
3121 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-2945_PoC

pgAdmin Proof of Concept

pgAdmin Query Tool RCE (CVE-2025-2945) – Python Proof of Concept

⚠️ Disclaimer
This repository contains a proof-of-concept exploit for CVE-2025-2945, a critical remote code execution vulnerability in pgAdmin 4 versions prior to 9.2. Use this code only in environments you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this software.

Table of Contents

  1. Overview
  2. Vulnerability Details (CVE-2025-2945)
  3. Prerequisites
  4. Setup & Installation
  5. Usage
  6. Exploit Workflow
  7. Detection & Mitigation
  8. License

Overview

This repository provides a standalone Python script—pgadmin_rce.py—that replicates the functionality of the Metasploit module for CVE-2025-2945. When run against a vulnerable pgAdmin 4 instance (versions 8.10–9.1), it will:

  1. Authenticate to pgAdmin 4 using valid credentials.
  2. Initialize the Query Tool (SQL editor) session.
  3. Discover a valid server‐connection ID (server group & server ID).
  4. Submit a malicious payload via the parameter to trigger an on the server.
Download Tool
query_commited
eval()
  • Observe an HTTP 500 response (indicating the payload executed on the backend).

    • Because the vulnerable endpoints rely on Python’s built-in eval() without sanitizing user input, an authenticated user can force pgAdmin to run arbitrary Python code on the host machine, resulting in full RCE.

    Vulnerability Details (CVE-2025-2945)

    • Affected Software:
      • pgAdmin 4 versions 8.10 through 9.1 (inclusive)
    • Fixed In:
      • pgAdmin 4 version 9.2 (released April 4, 2025)
    • CVSS v3.1 Score: 9.9 (Critical)
    • Impact:
      • An authenticated attacker can send a specially crafted query_commited (or high_availability in the Cloud Deployment module) parameter to an eval() call on the server, resulting in arbitrary code execution under the pgAdmin service account.
    • References:
      • Mitre CVE-2025-2945
      • NVD Entry (CVSS 9.9)
      • Tenable Analysis
      • Rapid7 Metasploit Module

    Prerequisites

    1. Python 3.7+

    2. Python packages (install via pip):

      • requests
      • faker
      root@kitploit:~
      pip install requests faker