Do Son The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.
pgAdmin 4
A critical pgAdmin 4 authentication bypass (CVE-2026-86863) allows remote admin takeover. Patch this pgAdmin 4 authentication bypass vulnerability now.
pgAdmin 4 v9.15 fixes a 9.4 CVSS auth bypass and multiple RCE flaws. Attackers can execute OS commands via SQL tools. Upgrade your pgAdmin server now!
Learn about CVE-2025-2945, a critical vulnerability in pgAdmin 4 that can lead to remote code execution in your database environment.
CVE-2024-2044 in pgAdmin 4 could have allowed a remote, authenticated attacker to execute arbitrary code on affected systems