CVE-2025-12765 — Improper Certificate Validation in Pgadmin 4

CWE-295 — Improper Certificate Validation4 documents4 sources
Severity
7.4HIGHNVD
CNA7.5
EPSS
0.0%
top 92.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Pgadmin.org Pgadmin 4Pgadmin 4
Timeline
PublishedNov 13

Description

pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.2 | Impact: 5.2

Affected Packages2 packages

▶NVDpgadmin/pgadmin_4< 9.10
▶CVEListV5pgadmin.org/pgadmin_4< 9.10

🔴Vulnerability Details

3
CVEList
pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass.↗2025-11-13
▶
GHSA
pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification↗2025-11-13
▶
OSV
pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification↗2025-11-13
▶
CVE-2025-12765 — Improper Certificate Validation | cvebase