[SECURITY] Fedora 43 Update: pgadmin4-9.16-1.fc43

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

SQL Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to SQL Injection via the description field in dialog templates when rendering SQL statements. An attacker can execute arbitrary SQL commands by submitting crafted input containing special characters to break...

Missing Authentication for Critical Function

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the closesqleditorsession and checktransactionstatus functions in the SQL Editor module, which lack proper authentication checks. An attacker can execute...

CVE-2026-12045

Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that the assistant reads to execute arbitrary SQL with the privileges of the pgAdmin user's database role. The AI Assistant's executesqlquery tool runs LLM-generated SQL inside a BEGIN...

CVE-2026-12044 pgAdmin 4: SQL injection in COMMENT ON ... IS '<description>' rendering across dialog templates

SQL injection in pgAdmin 4 across every dialog template that renders COMMENT ON ... IS '' for a user-supplied description field. The Jinja templates for Domains and their constraints, Foreign Tables, Languages, and Event Triggers, plus the Views OID-lookup query, interpolated the description...

GHSA-HP84-P2GQ-6FVR vulnerabilities

Vulnerabilities for packages: pgadmin4...

GHSA-HR4R-FWPV-C95J vulnerabilities

Vulnerabilities for packages: pgadmin4...

CVE-2026-7815 vulnerabilities

Vulnerabilities for packages: pgadmin4...

GHSA-J74F-G7VX-FH4X vulnerabilities

Vulnerabilities for packages: pgadmin4...

GHSA-H2X2-Q2MC-24GW vulnerabilities

Vulnerabilities for packages: pgadmin4...

[SECURITY] Fedora 43 Update: pgadmin4-9.15-1.fc43

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Access Control Bypass

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Access Control Bypass via insufficient authorization checks in the API endpoints handling user-owned objects and shared server features. An attacker can gain unauthorized access to other users' private...

UNIX Symbolic Link (Symlink) Following

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following through the File Manager. An attacker can cause unauthorized file writes or overwrite arbitrary files by planting a symbolic link inside their own storage directory tha...

Brute Force

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Brute Force due to improper enforcement of account lockout in the login. An attacker can bypass account lockout protections and perform unlimited password-guessing attempts by submitting valid credentials...

Deserialization of Untrusted Data

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the FileBackedSessionManager. An attacker can execute arbitrary code by placing a crafted serialized payload into the sessions directory, which is deserialized without...

SQL Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to SQL Injection via the Import/Export query export. An attacker can execute arbitrary commands on the server or write arbitrary files by injecting crafted input into the psql \copy metacommand template...

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, dagster, nemo, pgadmin4-fips, airflow, airflow-core, jupyter-base-notebook, prefect-fips, superset, dagster-fips...

Fedora 44 : pgadmin4 (2026-34c2bf6df4)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-34c2bf6df4 advisory. Update axios to 1.15.0, fixes CVE-2026-40175 and CVE-2025-62718. ---- Update to pgadmin4-9.14. Tenable has extracted the preceding description block...

[SECURITY] Fedora 42 Update: pgadmin4-9.14-3.fc42

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Fedora 42 : pgadmin4 (2026-b4633cbe23)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4633cbe23 advisory. Update axios to 1.15.0, fixes CVE-2026-40175 and CVE-2025-62718. ---- Update to pgadmin4-9.14. Tenable has extracted the preceding description block...