pgAdmin 9.19 fixes cross-user credential and command-execution flaws

pgAdmin 4 version 9.19 fixes fifteen security vulnerabilities, including command injection in data export and cases where one user could inherit another account’s credentials. Shared server deployments get tighter separation from the service account’s password files, certificates and SSH identity. Password execution commands now require an administrator-defined allowlist configured before the first startup after upgrading.

pgAdmin Development Team · Oct 31, 2026

Why it matters

Database administration tools need boundaries between users as well as correctly secured database connections.

More context

The October 31 release provides desktop builds, containers and server packages. Review SERVER_PASSEXEC_COMMANDS before upgrading server mode, along with the new allowed connection-services setting. The release also adds extended-statistics management and JSON/XML query-result exports.

Keep in mind

Exposure depends on deployment mode, authentication setup and reachable features. The release notes describe vulnerabilities and fixes, not evidence that every installation was exploited.

Original read