Windows apps · Application version · November 10, 2025

pgAdmin 4 9.10

pgAdmin 4 9.10, released November 10, 2025, fixes 4 CVEs in pgAdmin 4 (version 9.10). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

1 rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.1271

96th percentile

Priority of the 4 CVEs

Patch now 0
                                Urgent 1
                                High 3
                                Routine 0

Applies to

Product	Version
pgAdmin 4	9.10

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2025-12762	Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)	9.8	0.1271	None reported
High	CVE-2025-12763	Command injection vulnerability allowing arbitrary command execution on Windows	8.8	0.0091	None reported
High	CVE-2025-12764	pgAdmin 4: LDAP injection vulnerability in LDAP authentication flow.	7.5	0.0048	None reported
High	CVE-2025-12765	pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass.	7.4	0.0023	None reported