pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification

ALTO 7.4CVE-2025-12765 · GHSA-g4r8-3qmh-pmch · PYSEC-2026-1773 · Published 13/11/2025 · updated 07/10/2026

En resumen

CVE-2025-12765 es una vulnerabilidad ALTO (CVSS 7.4) que afecta a pgadmin4, pgadmin 4 (pgadmin).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.23%, mayor que el 13.9% de las vulnerabilidades.
Solución: actualizar a 9.10 o posterior.

Package	Affected versions	Patched versions
pgadmin4 PyPI	`< 9.10`	`9.10`
pgadmin 4 pgadmin	`< 9.10`	`9.10`

pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

NVD description

pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 9.10

9.10

< 9.10

9.10

Más vulnerabilidades de pgadmin4

Ver todo →