Vulnerability Database · PyPI · pgadmin4 · Version

pgadmin4 6.9.0

6.9.0 is affected by 54 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 9.18.0.

Critical 12 High 28 Medium 14 Low 0 Unrated 0

Released 12 May 2022 Licence non-standard Also known from other sources 54 Newer releases 80 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

pgadmin4 6.9.0 vulnerabilities

54 vulnerabilities cover pgadmin4 6.9.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-7813: pgAdmin 4 Authorization Vulnerability in Server Mode 9.9 critical 9.15 29 Jun 2026
CVE-2024-2044: pgAdmin 4 Vulnerable to Unsafe Deserialization and Remote Code Execution 9.9 critical 8.4 29 Jun 2026
CVE-2025-2945: pgAdmin 4 Remote Code Execution Vulnerability 9.9 critical 9.2 29 Jun 2026
CVE-2026-7813: pgAdmin 4 Authorization Vulnerability in Server Mode 9.9 critical 9.15 11 May 2026
CVE-2025-2945: pgAdmin 4 Remote Code Execution Vulnerability 9.9 critical 9.2 03 Apr 2025
Unsafe Deserialization and Remote Code Execution in pgAdmin 4 9.9 critical 8.4 07 Mar 2024
CVE-2025-13780: pgAdmin4 Meta-Command Filter Command Execution Vulnerability 9.1 critical 9.11 29 Jun 2026
CVE-2025-12762: pgAdmin4 Remote Code Execution Vulnerability in Server Mode 9.1 critical 9.10 29 Jun 2026
CVE-2025-2946: pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering 9.1 critical 9.2 29 Jun 2026
CVE-2025-13780: pgAdmin4 Meta-Command Filter Command Execution Vulnerability 9.1 critical 9.11 11 Dec 2025
CVE-2025-12762: pgAdmin4 Remote Code Execution Vulnerability in Server Mode 9.1 critical 9.10 13 Nov 2025
CVE-2025-2946: pgAdmin 4 Cross-Site Scripting (XSS) Vulnerability in Query Result Rendering 9.1 critical 9.2 03 Apr 2025
CVE-2026-7815: pgAdmin 4 SQL Injection Vulnerability in Maintenance Tool 8.8 high 9.15 13 Jul 2026
CVE-2026-7816: pgAdmin 4 OS Command Injection Vulnerability in Import/Export Functionality 8.8 high 9.15 13 Jul 2026
CVE-2022-4223: pgAdmin4 Code Injection Vulnerability 8.8 high 6.17 07 Jul 2026
CVE-2026-7816: pgAdmin 4 OS Command Injection Vulnerability in Import/Export Query Export 8.8 high 9.15 11 May 2026
CVE-2026-7815: SQL Injection Vulnerability in pgAdmin 4 Maintenance Tool 8.8 high 9.15 11 May 2026
CVE-2022-4223: pgadmin4 Code Injection Vulnerability 8.8 high 6.17 13 Dec 2022
CVE-2024-9014: pgAdmin4 OAuth2 Client ID and Secret Exposure Vulnerability 8.6 high 8.12 07 Jul 2026
CVE-2024-9014: pgAdmin4 OAuth2 Client ID and Secret Exposure Vulnerability 8.6 high 8.12 23 Sep 2024
CVE-2026-7819: pgAdmin 4 File Manager Symbolic-Link Path Traversal Vulnerability 8.1 high 9.15 13 Jul 2026
CVE-2026-7819: pgAdmin 4 File Manager Symbolic-Link Path Traversal Vulnerability 8.1 high 9.15 11 May 2026
CVE-2023-1907: pgAdmin4 Incorrect Default Permissions Vulnerability 8.0 high 7.0 07 Jul 2026
CVE-2023-1907: pgAdmin4 Incorrect Default Permissions Vulnerability 8.0 high 7.0 09 Jan 2025
CVE-2025-9636: pgadmin4 Cross-Origin Opener Policy Vulnerability 7.9 high 9.8 07 Jul 2026
CVE-2025-9636: pgAdmin4 Cross-Origin Opener Policy Vulnerability 7.9 high 9.8 05 Sep 2025
CVE-2025-12765: pgAdmin LDAP Authentication TLS Bypass Vulnerability 7.5 high 9.10 07 Jul 2026
CVE-2025-12764: pgAdmin LDAP Injection Vulnerability 7.5 high 9.10 07 Jul 2026
CVE-2025-12765: pgAdmin LDAP Authentication TLS Bypass Vulnerability 7.5 high 9.10 13 Nov 2025
CVE-2025-12764: pgAdmin LDAP Injection Vulnerability 7.5 high 9.10 13 Nov 2025
CVE-2026-1707: pgadmin4 Restore Restriction Bypass via Key Disclosure Vulnerability 7.4 high 9.12 13 Jul 2026
CVE-2024-4215: pgAdmin Multi-Factor Authentication Bypass Vulnerability 7.4 high 8.6 07 Jul 2026
CVE-2024-4216: pgAdmin4 Cross-site Scripting Vulnerability in /settings/store API Response 7.4 high 8.6 07 Jul 2026
CVE-2024-3116: pgAdmin Remote Code Execution Vulnerability 7.4 high 8.5 07 Jul 2026
CVE-2026-1707: pgAdmin4 Restore Restriction Bypass via Key Disclosure Vulnerability 7.4 high 9.12 05 Feb 2026
Multi-Factor Authentication Bypass Vulnerability in pgAdmin4 7.4 medium 8.6 02 May 2024
pgAdmin Cross-site Scripting Vulnerability in /settings/store API response json payload 7.4 high 8.6 02 May 2024
CVE-2024-3116: pgAdmin4 Remote Code Execution (RCE) Vulnerability 7.4 high 8.5 04 Apr 2024
CVE-2026-7818: pgAdmin 4 Remote Code Execution via Unsafe Deserialization 7.0 high 9.15 13 Jul 2026
CVE-2026-7818: pgAdmin 4 FileBackedSessionManager Unsafe Deserialization Vulnerability 7.0 high 9.15 11 May 2026
CVE-2025-12763: pgAdmin 4 Command Injection Vulnerability on Windows Systems 6.8 medium 9.10 07 Jul 2026
CVE-2025-12763: Command Injection Vulnerability in pgAdmin 4 on Windows Systems 6.8 medium 9.10 13 Nov 2025
CVE-2026-7820: pgAdmin 4 Improper Restriction of Excessive Authentication Attempts 6.5 medium 9.15 13 Jul 2026
CVE-2026-7817: pgAdmin 4 Local File Inclusion and Server-Side Request Forgery Vulnerabilities 6.5 medium 9.15 13 Jul 2026
CVE-2023-0241: pgAdmin 4 Directory Traversal Vulnerability 6.5 medium 6.19 07 Jul 2026
CVE-2026-7817: pgAdmin 4 Local File Inclusion and SSRF Vulnerabilities 6.5 high 9.15 11 May 2026
CVE-2026-7820: pgAdmin 4 Improper Restriction of Excessive Authentication Attempts 6.5 medium 9.15 11 May 2026
CVE-2023-0241: pgAdmin 4 Directory Traversal Vulnerability 6.5 medium 6.19 27 Mar 2023
CVE-2023-22298: pgAdmin 4 Open Redirect Vulnerability 6.1 medium 6.14 07 Jul 2026
CVE-2023-22298: pgAdmin 4 Open Redirect vulnerability 6.1 medium 6.14 17 Jan 2023
CVE-2023-5002: pgAdmin Arbitrary Command Execution Vulnerability 6.0 medium 7.7 07 Jul 2026
CVE-2023-5002: pgadmin4 - Arbitrary Command Execution 6.0 medium 7.7 22 Sep 2023
CVE-2026-7814: pgAdmin 4 Stored XSS Vulnerability in Browser Tree and Explain Visualizer Modules 4.8 medium 9.15 13 Jul 2026
CVE-2026-7814: pgAdmin 4 Stored XSS Vulnerability in Browser Tree and Explain Visualizer Modules 4.8 medium 9.15 11 May 2026

Looking for another version, or everything Vulert holds for pgadmin4?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About pgadmin4 6.9.0

Is pgadmin4 6.9.0 vulnerable?

Yes. 54 vulnerabilities in the Vulert database cover pgadmin4 6.9.0: 12 critical, 28 high, 14 medium and 0 low. The upgrade Vulert recommends is 9.18.0, and each entry above names the fixed version to move to.

Which version of pgadmin4 should I use instead of 6.9.0?

9.18.0 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 6.9.0 the latest release of pgadmin4?

No. 6.9.0 was published 12 May 2022, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor pgadmin4 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pgadmin4 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.