CVE-2025-12765: pgAdmin LDAP Authentication TLS Bypass Vulnerability
Summary
CVE-2025-12765: pgAdmin. Affects pgadmin4 versions < 9.10. Fixed in 9.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
pgAdmin is a popular open-source administration and development platform for PostgreSQL, allowing users to manage databases through a web interface. It provides features such as query execution, database design, and user management. However, versions up to 9.9 are vulnerable to a security flaw in the LDAP authentication mechanism, which can lead to TLS certificate verification bypass, potentially exposing sensitive data to unauthorized access.
Vulnerability Detail
The vulnerability in pgAdmin arises from its LDAP authentication mechanism, which fails to properly verify TLS certificates. This flaw allows an attacker to bypass the security checks that ensure the authenticity of the LDAP server, leading to potential man-in-the-middle attacks. If exploited, this vulnerability could allow unauthorized access to sensitive information, compromising the security of the database and its users.
How To Fix
Latest published version: 9.18.0 as of 22 Oct 2026
pip install --upgrade "pgadmin4==9.18.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
9.10
This is the first release that contains the fix.
pip install --upgrade "pgadmin4==9.10"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable LDAP authentication if it is not essential for their operations. However, this is not a recommended long-term solution as it may expose the system to other vulnerabilities.
Conclusion
The pgAdmin vulnerability CVE-2025-12765 poses a significant risk to users relying on LDAP authentication. It is crucial to update to version 9.10 or later to mitigate this risk. Users should remain vigilant and consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for pgadmin4 →
FAQ
CVE-2025-12765 is a vulnerability in pgAdmin that allows bypassing TLS certificate verification in the LDAP authentication mechanism.
pgAdmin versions up to and including 9.9 are affected by this vulnerability.
Exploitation of this vulnerability could lead to unauthorized access to sensitive data and potential man-in-the-middle attacks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for pgadmin4.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
