CVE-2026-17350

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 9.3 through 9.16

Description In SERVER mode, the per-tool permission system fails to consistently enforce permission checks. While a permissions required decorator is used on the initial route of a tool, subsequent backend routes and Socket.IO handlers only verify authentication via pga login required or socket login required without checking specific tool permissions. This allows an authenticated user with a valid database connection to bypass organizational segregation-of-duties controls and use tools they were explicitly denied access to by an administrator.

Affected components include the Query Tool, Grant Wizard, Schema Diff, ERD, PSQL, and Debugger tools, as well as Backup, Restore, Maintenance, and Import/Export blueprints. Specifically, users can obtain interactive psql sessions via the /pty Socket.IO namespace and invoke various database jobs. Additionally, triggering the /misc/workspace/adhoc connect server endpoint against an administrator-owned shared server can cause the system to persist a new server row still owned by the administrator.

Recommendations Update pgAdmin 4 to version 9.17. As a temporary mitigation, restrict user access to the /pty Socket.IO namespace and the /misc/workspace/adhoc connect server endpoint.