The pgAdmin Development Team has released pgAdmin 4 version 9.16, delivering patches for 7 security vulnerabilities, along with 64 bug fixes and new features.
The update addresses critical flaws spanning SQL injection, cross-site scripting, authentication bypass, and remote code execution risks that affected prior versions of the widely used PostgreSQL management tool.
The most urgent fixes in v9.16 close a chain of vulnerabilities tracked as CVE-2026-12044 through CVE-2026-12050.
pgAdmin 4 Version Patches Security Flaws
The most severe flaw, CVE-2026-12048, involved critical stored cross-site scripting (XSS) where PostgreSQL server error text and Explain plan-node content were passed unsanitized through html-react-parser.
Injected scripts could exfiltrate saved server credentials and issue unauthorized SQL against every connected server, a significant risk in multi-server deployments.
CVE-2026-12045 patched an AI Assistant read-only transaction bypass that enabled prompt-injected multi-statement payloads to commit outside the READ ONLY wrapper, ultimately chaining to remote code execution (RCE) via COPY ... TO PROGRAM on a superuser connection one of the most dangerous attack paths in the batch.
CVE-2026-12044 resolved a SQL injection across sixteen dialog templates that improperly rendered COMMENT ON ... IS '<description>', with the fix switching affected templates to qtLiteral and rewriting stats calls to pass relation OIDs via a ::oid::regclass cast.
CVE-2026-12046 addressed two SQL Editor endpoints missing the @pga_login_required decorator, leaving them reachable without authentication in server mode and exposing a pickle deserialization sink to unauthenticated attackers.
CVE-2026-12047 fixed HTML injection in the cloud deployment module covering RDS, Azure, and Google integrations, where SDK exception text was forwarded to the browser unsanitized and rendered directly through html-react-parser.
CVE-2026-12049 patched an open redirect in the multi-factor authentication flow via an unvalidated next parameter, while CVE-2026-12050 closed a SQL injection in the named restore point endpoint where user-supplied input was interpolated into SQL using str.format() instead of a bound parameter.
Additionally, v9.16 removes the administrator-role bypass from server-access helpers, ensuring that access-control checks introduced in v9.15 for CVE-2026-7813 are uniformly enforced for all users.
Beyond security hardening, v9.16 ships several usability enhancements. Administrators will appreciate the ability to colorize panel and tab headers based on the connected server’s color, making it easier to distinguish active server contexts at a glance.
The release also adds support for closing tabs with a middle-click, a “Back to Login” link on password reset pages, and support for the TOAST tuple target storage parameter in the Materialized View dialog.
Postgresql stated that OAuth2 login button icons now support any Font Awesome style, and the Helm chart gains configurable init container security context via containerSecurityContext.
On the dependency front, the team bumped Electron to 42.3.3, cryptography to 49.0, and updated several Python and JavaScript packages. The macOS bundle also strips unused foreign-architecture slices, reducing build size.
Given the severity of the patched vulnerabilities, particularly the RCE chain and stored XSS, security teams running pgAdmin in server mode should prioritize upgrading to v9.16 immediately.
Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google.
