CVE-2025-12765 pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass.
Attackers can bypass TLS certificate verification in pgAdmin 4's LDAP authentication, potentially enabling man-in-the-middle attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-12765?
CVE-2025-12765 is a high-severity vulnerability in pgadmin.org pgAdmin 4, published on 13 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.
Weakness: CWE-295
Which versions are affected by CVE-2025-12765?
3 open source packages ship an affected version, including pgadmin4. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pgadmin4 PyPI | All versions | 9.10 |
pgadmin4 PyPI | All versions | 9.10 |
pgadmin4 PyPI | All versions | 9.10 |
Products include Pgadmin Pgadmin 4.
How do I fix CVE-2025-12765?
Upgrade pgadmin4 to 9.10 or later.
Is CVE-2025-12765 being exploited?
There is no known exploitation of CVE-2025-12765 in the wild and no public exploit code.
Other vulnerabilities in pgadmin.org pgAdmin 4
- CVE-2025-2945 pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment
- CVE-2024-9014 OAuth2 client id and secret exposed through the web browser in pgAdmin 4
- CVE-2026-12046 Deserialization in pgAdmin 4
- CVE-2026-17351 SQL injection in pgAdmin 4
- CVE-2026-17566 Command injection in pgAdmin 4
Sources
Also known as GHSA-g4r8-3qmh-pmch, PYSEC-2026-1773.