A critical SQL injection vulnerability in the pgAdmin 4 AI Assistant allows authenticated users to bypass security controls and execute arbitrary database commands.

The vulnerability arises from improper neutralization of SQL elements where the application fails to correctly enforce a single-statement execution protocol. This allows an attacker to inject multi-statement payloads that break out of the intended read-only transaction, requiring low-privileged user access.

An attacker can execute arbitrary SQL commands, potentially leading to unauthorized data modification, database destruction, or further system compromise. With a CVSS score of 9.0, this vulnerability presents a significant risk to the integrity and availability of the database environment.

Immediate Action: Upgrade pgAdmin 4 to version 9.17 or later to ensure the correct enforcement of the extended query protocol.

Proactive Monitoring: Monitor database logs for unexpected or unauthorized queries originating from the pgAdmin AI Assistant service.

Compensating Controls: Restrict access to the AI Assistant feature for non-essential users and ensure that database service accounts operate with the principle of least privilege.

Public Exploit Available: Unknown

Given the potential for complete database compromise, organizations must treat this update with high priority. Apply the patch to all pgAdmin 4 instances immediately to mitigate the risk of unauthorized database manipulation.