pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-12765 · ADVISORY
• pgadmin-org/pgadmin4 · WEB
• pgadmin-org/pgadmin4 commit 09d2b7e · WEB
• pgadmin-org/pgadmin4 · PACKAGE
• pypi.org/project/pgadmin4 · PACKAGE
• GitHub Advisory GHSA-g4r8-3qmh-pmch · ADVISORY

Autres vulnérabilités de pgadmin4

• CVE-2026-7820MOYENNE 6.5Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS only inside its custo…
• CVE-2026-7819ÉLEVÉE 8.1Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_permission used os.path.abspath, which resolves '..' …
• CVE-2026-7818ÉLEVÉE 7.8Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of …
• CVE-2026-7817MOYENNE 6.5Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-suppli…
• CVE-2026-7816ÉLEVÉE 8.8OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a p…