pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)

pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode

pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code

pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files

pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API

pgAdmin 4: Adhoc server clone leaks another user's stored database credentials and ownership to a non-owner

pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)

pgAdmin 4: Unauthenticated pickle deserialization in SQL Editor close / update_connection routes enables remote code execution

pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool

pgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution

pgAdmin 4: SQL injection via unescaped object names in index Statistics and publication/subscription dependency views (incomplete fix for CVE-2026-12044)

pgAdmin 4: AI Assistant read-only transaction bypass allows unauthorised writes and remote code execution

pgAdmin 4: SQL injection in named restore point endpoint

pgAdmin 4: SQL injection in COMMENT ON ... IS '<description>' rendering across dialog templates

pgAdmin 4: OS command injection in Import/Export query export via psql metacommand breakout

pgAdmin 4: SQL injection in Maintenance tool option values leading to remote code execution

pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump…

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems

Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules)

pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability

A flaw was found in pgAdmin

The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore

pgAdmin 4: Symbolic-link path traversal in File Manager allows arbitrary file write

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to…

pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution

pgAdmin <= 9.9  is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing…

pgAdmin <= 9.9  is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification

pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools

pgAdmin 4: Missing authentication decorator on Constraints, preferences, Debugger and Schema Diff routes allows unauthenticated access in SERVER mode (incomplete fix for CVE-2026-12046)

pgAdmin 4: Account-lockout bypass via Flask-Security default /login view

pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints

pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability

A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that…

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from…

pgAdmin 4: Open redirect in multi-factor authentication flow via unvalidated 'next' parameter

pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS)

Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack…

pgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check

pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers

pgAdmin 4: Stored XSS via untrusted error and plan-node text rendered through html-react-parser

pgAdmin 4: HTML injection in cloud verify_credentials / deploy endpoints via unsanitised SDK exception text

pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload

pgAdmin <= 8.8 has an installation Directory permission issue. Because of this issue, attackers can gain unauthorised access to the installation directory on the Debian or RHEL 8…

pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer