pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification

HIGH 7.4CVE-2025-12765 · GHSA-g4r8-3qmh-pmch · PYSEC-2026-1773 · Published 13/11/2025 · updated 07/10/2026

Package	Affected versions	Patched versions
pgadmin4 PyPI	`< 9.10`	`9.10`
pgadmin 4 pgadmin	`< 9.10`	`9.10`

Description

pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

NVD description

pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.