CVE-2026-116248

In pgAdmin 4 (versions before 9.19 ), a logic flaw in the server API and servers.json import allows non-administrators to share a server with all users. Although the UI restricts the "Shared" switch to administrators, the create and update endpoints fail to validate the user's permissions, storin...