A critical authorization bypass in pgAdmin 4 allows authenticated users to access and inherit database credentials belonging to other users, including administrators.

This vulnerability (CWE-639 and CWE-522) occurs when cloning a server via the adhoc_connect_server function. The system fails to clear sensitive ownership and credential fields, causing the caller to inherit the source user's database access privileges.

This flaw allows for privilege escalation and cross-tenant data access, which undermines the entire security model of the database management interface. With a CVSS score of 9.6, the risk of unauthorized access to sensitive production databases is extremely high.

Immediate Action: Update pgAdmin 4 to version 9.17 or the latest available version to ensure proper isolation of user credentials during server cloning.

Proactive Monitoring: Review audit logs for unusual adhoc connection activity or unexpected changes in server ownership within the pgAdmin interface.

Compensating Controls: Restrict access to the pgAdmin dashboard to trusted users only and enforce the principle of least privilege for all database accounts managed through the tool.

Public Exploit Available: No (exploit_available: false)

This is a high-impact vulnerability that could lead to widespread database compromise within an organization. Organizations using pgAdmin 4 version 9.0 through 9.16 must prioritize this update to prevent unauthorized credential access.