pgAdmin 4: vanhemmat versiot ja versiohistoria

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.18. This release of pgAdmin 4 includes 29 bug fixes and new features, including fixes for four security vulnerabilities (CVE-2026-86861 through CVE-2026-86864). For more details, please see the release notes.
pgAdmin is the leading open-source graphical management tool for PostgreSQL. For more information, please see the website.
Notable changes in this release include:
Features:
- Collapse and restore the Object Explorer by re-clicking the current workspace icon, in the manner of the VS Code side bar, remembering the choice across refreshes. A keyboard shortcut, Ctrl+Alt+B by default, does the same thing and can be changed through the new toggle_object_explorer preference.
- Harden the default Content-Security-Policy so inline scripts run under a per-request nonce rather than a blanket 'unsafe-inline', and drop 'unsafe-eval'. style-src keeps 'unsafe-inline', because MUI and React inject runtime styles and inline style attributes that cannot carry a nonce, and development bundles have 'unsafe-eval' re-added automatically when DEBUG is set.
Security Fixes:
- Fix an authentication bypass in Webserver authentication mode, where get_user() fell back to reading the configured WEBSERVER_REMOTE_USER name from the inbound request headers when it was absent from the WSGI environment. Because a header is written by whoever sends the request, any client that could reach pgAdmin could assert any identity, including an administrator's, without presenting a credential. A header-asserted identity is now opt-in, restricted to a configured list of trusted proxies with an optional shared secret, and refused for accounts whose authentication source is not webserver (CVE-2026-86863).
- Fix argument and connection-string injection in the Backup tool, where the client-supplied database name was appended to the pg_dump argument vector as a bare positional value. Because getopt_long permutes arguments, a value beginning with a dash supplied further options such as --file, overriding the storage-confined output path; and because libpq expands a database name containing an equals sign into a full connection string, the same field could redirect the connection, and the password exported in PGPASSWORD, to a host of the caller's choosing. The database name is now passed through the PGDATABASE environment variable, which libpq never expands (CVE-2026-86864).
- Fix connection-string injection in the Restore and Maintenance tools, where the client-supplied database name was passed straight to --dbname and could likewise redirect the connection, and the exported password, to a server of the caller's choosing (CVE-2026-86862).
- Fix a time-of-check to time-of-use flaw in the File Manager's save_file endpoint, which backs saving from the Query Tool and ERD: the requested path was validated with check_access_permission() and then opened with a plain open(), so a symbolic link planted in between was followed, writing outside the user's storage directory. This is the write sink that CVE-2026-7819's hardening of the separate upload path did not cover (CVE-2026-86861).
- Refuse HTTP redirects on LLM API requests, rather than following a Location header on to a destination the ALLOWED_LLM_API_URLS check was never applied to. This is hardening rather than a fix for an exploitable flaw, since returning the redirect at all requires control of a host already on the allowlist.
- Reject an empty or null Username when importing a non-shared server, which previously imported cleanly and left a server that libpq would silently authenticate as the OS account running pgAdmin rather than reject outright.
Bugs/Housekeeping:
- Fix login being impossible against Flask-Security-Too 5.8.2, which corrected a long-standing inversion in UserMixin.is_locked() that pgAdmin's own is_locked() had been written against.
- Fix inherited columns in the Table dialog being editable and deletable, and the Data t

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.17. This release of pgAdmin 4 includes 28 bug fixes and new features, including fixes for seven security vulnerabilities (CVE-2026-17346 through CVE-2026-17351, and CVE-2026-17566). For more details, please see the release notes.
pgAdmin is the leading open-source graphical management tool for PostgreSQL. For more information, please see the website.
Notable changes in this release include:
Features:
- Include the authenticated user's identity in the HTTP access log.
- Add an opt-in Gateway API HTTPRoute template to the Helm chart as an alternative to the existing Ingress.
- Add a preference to cap the row count fetched by the plain "View Data" action, so it is usable on large tables without always doing a full SELECT *.
- Add support for a custom XYZ tile provider (URL, name, CRS, attribution, max zoom) in the Geometry Viewer, alongside the existing built-in base layers.
Security Fixes:
- Fix a tool-permission bypass where a user denied the Query Tool, Grant Wizard, or Schema Diff permission could still drive that tool's backend routes and Socket.IO handlers directly, since the permission check was applied only to a single "front door" route per tool. Also fixes a non-owner triggering an adhoc connection against another user's shared server persisting a new server record still owned by that other user (CVE-2026-17350).
- Fix OS command injection in the MASTER_PASSWORD_HOOK feature, where an externally-sourced username (e.g. via OAuth2/OIDC, Kerberos, or webserver authentication) containing shell metacharacters could execute arbitrary commands as the pgAdmin service account when the configured hook string uses %u (CVE-2026-17347).
- Fix a lexer-differential bypass of the AI Assistant's read-only transaction guard, where sqlparse's string-literal lexing disagreed with PostgreSQL's own parser under standard_conforming_strings = on, letting a crafted multi-statement payload smuggle a COMMIT past the intended read-only wrapper; an incomplete fix for CVE-2026-12045 (CVE-2026-17351).
- Fix SQL injection in the Index Statistics all-indexes listing and the Publications/Subscriptions Dependencies views, where an apostrophe in a table, index, publication, or subscription name broke out of an unescaped template interpolation; an incomplete fix for CVE-2026-12044 (CVE-2026-17346).
- Fix several Constraints, Preferences, Debugger, and Schema Diff routes missing the @pga_login_required decorator, making them reachable without authentication in server mode; an incomplete fix for CVE-2026-12046 (CVE-2026-17348).
- Fix an adhoc server connection cloning another user's stored database credentials (password, save password flag, tunnel password) alongside ownership, letting a non-owner who cloned another user's shared server connect using that user's saved database password (CVE-2026-17349).
- Fix OS command injection in the Import/Export Data tool, where a query-based export could pass a crafted query string past the \copy (...) parenthesis-balance guard by exploiting a backslash-escape mismatch with psql's default standard_conforming_strings = on behaviour, exposing a live TO PROGRAM clause for arbitrary command execution (CVE-2026-17566).
Bugs/Housekeeping:
- Fix Schema Diff's "Generate Script" and the browser tree's CREATE Script view emitting wrong SQL for SERIAL/identity columns, by detecting column-owned sequences via pg_depend instead of guessing the sequence name.
- Fix ALT+F5 ("Execute query at cursor") doing nothing when the cursor is on or near a statement that is not highlighted, in a Query Tool tab with multiple statements separated by blank lines.
- Fix the object browser's extension UI breaking under PostgreSQL 19's extension catalog changes.
- Detect a selected-but-unusable OS keyring and fall back gracefully instead of failing.
- Warn when OAuth2 provider settings are misplaced at the top level of the config instead of under OAUTH2_CONFIG.
- H

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.16. This release of pgAdmin 4 includes 64 bug fixes and new features, including fixes for seven security vulnerabilities (CVE-2026-12044 through CVE-2026-12050). For more details, please see the release notes.
pgAdmin is the leading open-source graphical management tool for PostgreSQL. For more information, please see the website.
Notable changes in this release include:
Features:
- Colorize panel and tab headers based on the connected server's colour, making it easier to identify which server a tab belongs to at a glance.
- Add a "Back to login" link to the Forgot Password and Reset Password pages.
- Add support for the TOAST tuple target storage parameter in the Materialized View dialog.
- Make the init container security context in the Helm chart configurable via containerSecurityContext.
- Add support for closing a tab with a middle-click on its title.
- Allow the OAuth2 login button icon to use any Font Awesome style, not only brand icons.
Security Fixes:
- Fix SQL injection across sixteen dialog templates that rendered COMMENT ON ... IS '<description>'; switches affected templates to qtLiteral and rewrites stats calls to pass the relation OID via a ::oid::regclass cast (CVE-2026-12044).
- Fix an AI Assistant read-only transaction bypass that allowed prompt-injected multi-statement payloads to commit out of the READ ONLY wrapper, chaining to RCE via COPY ... TO PROGRAM on a superuser connection (CVE-2026-12045).
- Fix two SQL Editor endpoints missing the @pga_login_required decorator, making them reachable without authentication in server mode and exposing a pickle deserialization sink (CVE-2026-12046).
- Fix HTML injection in the cloud deployment module (RDS, Azure, Google) where SDK exception text was forwarded to the browser unsanitised and rendered through html-react-parser (CVE-2026-12047).
- Fix critical stored cross-site scripting where PostgreSQL server error text and Explain plan-node content passed through html-react-parser across notifier toasts, form errors, modal alerts, and the Explain visualiser; injected script could exfiltrate saved server credentials and issue SQL against every connected server (CVE-2026-12048).
- Fix an open redirect in the multi-factor authentication flow via an unvalidated next parameter (CVE-2026-12049).
- Fix SQL injection in the named restore point endpoint where the user-supplied restore point name was interpolated into SQL via str.format() instead of a bound parameter (CVE-2026-12050).
Bugs/Housekeeping:
- Remove the administrator-role bypass from server-access helpers so the access-control checks added in 9.15 (CVE-2026-7813) are enforced uniformly.
- Remove EDB BigAnimal cloud deployment support, which was deprecated in 9.15.
- Preserve jsonb number representation in the JSON editor so trailing fractional zeros and large integers are no longer rewritten when saving unmodified rows.
- Fix a View/Edit Data crash when the session contains a transaction object that is not filter-capable, which could prevent the desktop application from loading after an upgrade.
- Rebase version-specific SQL templates so the default targets PostgreSQL 14, the oldest supported server version, dropping obsolete sub-14 template buckets.
- Strip the foreign-architecture slice from the macOS bundle so single-arch builds no longer ship unused code.
- Bump Electron to 42.3.3, cryptography to 49.0, and other Python and JavaScript dependencies.
- Update the Italian translation.
Deprecations:
- pgAgent has been deprecated and will be discontinued. pgAgent will be removed from the website within one month, and support within pgAdmin will be removed approximately six months from now. Users are encouraged to migrate to an alternative job scheduling solution.
Builds for Windows and macOS are available now, along with a Python Wheel, Docker Container, RPM, DEB Package, and source code tarball from the download area.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.15. This release of pgAdmin 4 includes 19 bug fixes and new features, including fixes for eight security vulnerabilities (CVE-2026-7813 through CVE-2026-7820). For more details, please see the release notes.
pgAdmin is the leading open-source graphical management tool for PostgreSQL. For more information, please see the website.
Notable changes in this release include:
Features:
- Allow the Docker container image to run as a non-default user via the PUID and PGID environment variables.
Bugs/Housekeeping:
- Fix cross-user data access and shared-server privilege escalation in server mode (CVE-2026-7813).
- Tighten Shared Server feature parity, owner-only field handling, and write guards as a follow-up to the data-isolation hardening.
- Fix stored cross-site scripting (XSS) via crafted PostgreSQL object names rendered in the Browser Tree and Explain Visualizer (CVE-2026-7814).
- Fix SQL injection in the Maintenance tool option values (CVE-2026-7815).
- Fix OS command injection in Import/Export query export (CVE-2026-7816).
- Fix local-file inclusion and server-side request forgery in the LLM API configuration endpoints (CVE-2026-7817).
- Fix unsafe deserialization in the session manager that could lead to remote code execution (CVE-2026-7818). This change also encrypts session files at rest using Fernet, restricts session-file and DATA_DIR permissions to 0o600, switches the session-digest default from SHA-1 to SHA-256, and drops several non-roundtrippable live objects from the session.
- Fix symlink-based path traversal in the file manager (CVE-2026-7819).
- Fix account-lockout bypass on Flask-Security's default /login view so the locked field is honored on every authentication path (CVE-2026-7820).
- Use absolute paths for a2enmod and a2enconf in the Debian setup script so it works when /usr/sbin is not on PATH.
- Bump Python and JavaScript runtime/development dependencies, and upgrade ESLint to v10.
- Update the Czech, Italian, Russian, Spanish, and Swedish translations.
Deprecations:
- The BigAnimal cloud deployment integration is deprecated and will be removed in the next version of pgAdmin 4.
Builds for Windows and macOS are available now, along with a Python Wheel, Docker Container, RPM, DEB Package, and source code tarball from the tarball area.
[Read News]

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.14. This release of pgAdmin 4 includes 23 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Added support to download binary data from the result grid.
- Added support for custom LLM provider URLs for OpenAI and Anthropic, allowing use of OpenAI-compatible providers such as LM Studio, EXO, and LiteLLM.
- Fixed an issue where AI features (AI Assistant tab, AI Reports menus, and AI Preferences) were visible in the UI even when LLM_ENABLED is set to False.
- Allow copying of text from the AI Assistant chat panel.
Bugs/Housekeeping:
- Fixed an issue where selecting all in the Query Tool's Messages tab would select the entire page content.
- Fixed an issue where OAuth2 authentication fails with 'object has no attribute' if OAUTH2_AUTO_CREATE_USER is False.
- Ensure that the Geometry Viewer refreshes when re-running queries or switching geometry columns, preventing stale data from being displayed.
- Fixed an issue where the default fillfactor value for B-tree indexes was incorrect.
- Fixed an issue where AI Reports are grayed out after setting an API key by auto-selecting the default provider.
- Fixed an issue where AI Assistant does not notify that No API Key or Provider is Set.
- Fixed an issue where AI Reports fail with OpenAI models that do not support the temperature parameter.
- Improve the AI Assistant user prompt to be more descriptive of the actual functionality.
- Fix an issue where the AI Assistant was not retaining conversation context between messages, with chat history compaction to manage token budgets.
- Support /v1/responses for OpenAI models.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.13. This release of pgAdmin 4 includes 15 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Core LLM integration infrastructure, AI reports for security, schema, and performance, AI chat for the Query Tool, and AI Insights for EXPLAIN.
- No FK are shown in diagrams created from existing tables in the ERD Tool.
- Add support for 'ONLY' in the Index creation dialog.
- Allow users to customize "OF TYPE" columns during table creation.
- Allow "drag-n-drop" for only user chosen tables, and show relations between them.
- Load predefined users from a JSON file through the command line.
Bugs/Housekeeping:
- Fixed an issue where the 'Quote strings only' configuration was ignored when downloading the result set.
- Fixed an issue where tools settings changed by the users were not restored on application relaunch.
- Fixed an issue where modifying a shared server incorrectly updated the original server details.
- Fixed an issue where a long name in ERD table node was not breaking into multiple lines.
- Fixed an issue where column comments were not displayed in the SQL tab for materialised views.
- Fix an issue where deployment of the helm chart was crashing with "operation not permitted."
- Fix translation compilation.
- Fix broken checkbox selection in backup dialog's object tree.
- Fixed an issue in file dialog where renaming was not working.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.12. This release of pgAdmin 4 includes 3 new features and 21 bug fixes/housekeeping changes. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Add new options like INHERIT and SET to the Role's membership tab.
- Add a new button in the query tool data output toolbar to get entire range of data.
- Enhance OAUTH2 and OIDC authentication support with improved claims handling and configuration options.
Bugs/Housekeeping:
- Mask the secret key for restrict option in the process watcher when restoring plain SQL file (CVE-2026-1707).
- Fix Query Tool state restoration for new connections and queries.
- Fix pg_restore logs to distinguish UI sync issues from actual failures.
- Optimize checkbox selection logic in backup dialog objects tree.
- Fixed an issue where double click to open a file in the file manager is not working.
- Ensure saved shared server passwords are re-encrypted on password change.
- Fixed an issue where the dashboard freezes on initial render when there is a high number of locks.
- Fixed the SSL certificate issue while checking for the upgrade.
- Fixed a sorting issue in the system stats memory usage table.
- Disable Parameters and Membership fields when object is not new for Login and group roles.
- Fixed an issue where the Query History panel would auto-scroll to the top and did not preserve the scroll bar position for the selected entry.
- Fixed an issue where pgAdmin4 app on macOS cannot auto-update while running on a read-only volume even if present in the Applications folder.
- Fixed an issue where connection parameters were using localized values instead of literal values, causing connection failures.
- Ensure the container deployment supports boolean values in yaml format.
- Fix pgAdmin fails when performing Backup/Restore on a PostgreSQL connection defined exclusively via pg_service.conf.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.11. This release of pgAdmin 4 includes 16 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Add support of DEPENDS/NO DEPENDS ON EXTENSION for INDEX.
- Add support of DEPENDS/NO DEPENDS ON EXTENSION for MATERIALIZED VIEW.
- Add support for showing the column data type beside column name in the object explorer.
- Added Ubuntu 25.10 and Fedora 43.
- Add conditional TLS support for the Ingress in the Helm chart.
Bugs/Housekeeping:
- Plain SQL restore runs with '\restrict' option to prevent harmful psql meta-commands (CVE-2025-13780).
- Fixed an issue on type casting of default string function/procedure arguments in debugger tool.
- Fix pkg_resources deprecation warning by migrating Docker base image to python:3-alpine from alpine:latest.
- Fixed an issue where EXPLAIN should run on query under cursor if no text is selected.
- Fixed an issue where opening file in Query Tool does not retain file name in tab.
- Fixed an issue where connection is failing via Query Tool/PSQL Tool workspaces.
- Fixed an issue where copying highlighted text in the query tool data output cell editor would copy the complete string.
- Fixed an issue where copying a single cell should not add quoting.
- Fix the Helm chart server definition and change the app version.
- Specify the correct hostname placeholder for the Password Exec command.
- Ensure the proper handling of extra volume mount configurations in the Helm deployment template by correcting the configuration value references.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.10. This release of pgAdmin 4 includes 5 new features and 12 bug fixes/housekeeping changes. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Added the ability to search for tables and automatically bring them into view in the ERD tool.
- Add support of DEPENDS/NO DEPENDS ON EXTENSION for PROCEDURE.
- Add support for setting image download resolution in the ERD tool.
- Add support for displaying detailed Citus query plans instead of 'Custom Scan' placeholder.
- Add support for formatting .pgerd ERD project file.
Bugs/Housekeeping:
- Fixed an issue where data output column resize is not sticking in Safari.
- Fixed an issue where Schema Diff does not ignore Tablespace for indexes.
- Fixed an issue where the 2FA window redirected to the login page after session expiration.
- Fixed an issue where the Select All option on the columns tab of import/export data was not working in languages other than English.
- Fixed an issue where the Debian build process failed with a "Sphinx module not found" error when using a Python virtual environment.
- Fixed an issue where the last used storage directory was reset to blank, leading to access denied errors during backup or restore operations.
- Fixed an issue that prevented assigning multiple users to an RLS policy.
- Fixed remote code execution vulnerability when restoring PLAIN-format SQL dumps in server mode (CVE-2025-12762).
- Fixed Command injection vulnerability allowing arbitrary command execution on Windows (CVE-2025-12763).
- Fixed LDAP authentication flow vulnerable to TLS certificate verification bypass (CVE-2025-12765).
- Fixed LDAP injection vulnerability in LDAP authentication flow (CVE-2025-12764).
- Migrate pgAdmin UI to use React 19.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.9. This release of pgAdmin 4 includes 10 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Add support of DEPENDS/NO DEPENDS ON EXTENSION for ALTER FUNCTION.
- Added "MULTIRANGE_TYPE_NAME" option while creating a Range Type.
- Added "SUBSCRIPT" option while creating an External Type.
- Added option to skip the password dialog when using an identity file.
- Added 'failover' and 'two_phase' parameter support in CREATE/ALTER SUBSCRIPTION for PostgreSQL v17+.
- Add support for initializing the pgAdmin4 Kubernetes Helm chart.
Bugs/Housekeeping:
- Fixed an issue where the query tool displayed 'default' instead of 'null' for null text data in the data output.
- Fixed an issue where the pgAdmin configuration database wasn't being created on a fresh install when an external database was used for the configuration.
- Fixed an issue where shortcuts are not working as expected on multiple keyboard layouts.
- Fixed an issue where saving the newly changed preferences was not reflecting on the preferences tab.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.8. This release of pgAdmin 4 includes 10 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Add menu items for truncating foreign tables.
- Added Debian Trixie as a supported platform for pgAdmin.
- Allow user to configure security related gunicorn parameters.
- Change the default pgAdmin theme to System.
Bugs/Housekeeping:
- Fixed Cross-Origin Opener Policy (COOP) vulnerability in the OAuth 2.0 authentication flow (CVE-2025-9636).
- Remove usage of BrowserFS as it is deprecated.
- Pin Paramiko to version 3.5.1 to fix the DSSKey error introduced in the latest release.
- Fixed an issue where pgAdmin config migration was failing while upgrading to v9.7.
- Fixed an issue where editor shortcuts fail when using Option key combinations on macOS, due to macOS treating Option+Key as a different key input.
- Fixed an issue where the pgAdmin configuration database wasn’t being created on a fresh install when an external database was used for the configuration.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.7. This release of pgAdmin 4 includes 22 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Add support for automatic updates in the pgAdmin 4 Desktop application on macOS.
- Added GENERIC_PLAN, MEMORY, and SERIALIZE options to EXPLAIN/EXPLAIN ANALYZE command.
- Add support for changing the cursor blink rate within the editors.
- Add support for server tag-based filtering in the Object Explorer.
- Added support for builtin locale provider while creating Collation.
Bugs/Housekeeping:
- Introduced an ‘Editor’ preferences category and migrated all editor related settings into it.
- Fixed an issue where CPU usage was very high on Windows when opening the psql tool.
- Fixed an issue where adding breakpoints caused errors, and stepping out of a nested function removed breakpoints from the parent function.
- Fixed an issue where custom column widths in the result grid of Query Tool or View/Edit Data were reset after re-executing a query.
- Fixed the issue where updating the name of a table column does not reflect in the corresponding primary key constraint.
- Make Dashboard tables to be vertically resizable.
- Fixed the incorrect behaviour of the option deduplicate items after creating the index.
- Added PKEY index in the index statistics summary.
- Fixed an issue where downloading images on the ERD tool was not working in desktop mode.
- Ensure the scratch pad in the Query Tool is not restored after it is closed.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.6. This release of pgAdmin 4 includes 4 new features and 7 bug fixes/housekeeping changes. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Ensure that keyboard shortcuts are displayed in tooltips, context menus, and the main menu.
- Implemented a server-side cursor to enhance performance when retrieving large datasets.
- Added support for setting a custom SESSION_DIGEST_METHOD in pgAdmin 4 to facilitate FIPS compliance.
- Enable the PKCE workflow for OAuth 2 authentication.
Bugs/Housekeeping:
- Fixed an issue where windows installer is not signing tmp files generated by InnoSetup.
- Fixed an issue in the Search Objects tool where selecting a node occasionally selected an incorrect node.
- Improved the application state restoration by leveraging rc-dock layout and ensure the order and layout of tabs is maintained on restore.
- Fixed an issue where json editor in result grid was crashing if null value is set in the json editor.
- Update zstd library link to 1.5.7 in Dockerfile.
- Ensure that pgAdmin 4 is compatible with PG/EPAS v18.
- Use 'Drop' instead of 'Delete' for object commands to make destructive actions more deliberate.

The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.5. This release of pgAdmin 4 includes 18 bug fixes and new features. For more details, please see the release notes.
Note:The publication of the Python package to PyPi has been delayed and will be completed as soon as possible.
Notable changes in this release include:
Features:
- Add a new permission to allow disabling the "Change Password" feature for a pgAdmin role.
- Added role-based restrictions for editing server connections.
- Added support for customizing keyboard shortcuts in the Query Tool's Edit menu.
- Add a search box to enable searching within the preferences tab.
- Added support to preserve the workspace, query windows, and pgAdmin state during an abrupt shutdown or restart.
- Open preferences in a new tab instead of a dialog for a better user experience.
- Supports JSON logging for gunicorn process within Docker.
Bugs/Housekeeping:
- Improved PL/pgSQL code folding and support nested blocks.
- Add a flag to allow access to system Python packages on recent Linux distributions.
- Fixed an issue where utilities such as pg_dump and pg_restore failed to log error messages when required dependency files were missing.
- Fixed an issue where the Schema Diff Tool incorrectly reported differences due to variations in the order of the privileges.
- Fixed an issue in SQL syntax highlighting where the same color was used for both variable names and datatypes.
- Fixed an issue in the query tool where using multiple cursors to copy text resulted in only the first line being copied.
- Fixed an issue where data export using a query opened the wrong dialog type.
- Fixed an issue where data export using a query failed when the query contained a newline character.
- Fixed a UI layout issue that occurred after upgrading from pgAdmin v9.2 when all tabs had been closed prior to the upgrade.
- Fixed an issue where the Columns node was not visible under Catalog Objects.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.4. This release of pgAdmin 4 includes 15 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Enabled large file downloads for desktop users within the query tool.
- Add all missing options to the Import/Export Data functionality, and update the syntax of the COPY command to align with the latest standards.
- Add support for exporting table data based on a custom query.
Bugs/Housekeeping:
- Fixed an issue where the result grid slowed down when any column contained a large amount of data.
- Fix the issue where an error is displayed when a table is dropped while a query is running.
- Fixed an issue where the options key was not working as expected in the PSQL tool.
- Fixed an issue where correct error message not displayed when sql statement contains Arabic letters.
- Enhance contrast for selected and hovered items in the Object Explorer to improve visibility and accessibility.
- Fixed an issue where the query tool returns "cannot unpack non-iterable Response object" when running any query with a database name change.
- Handle result grid data changes in View/Edit Data mode by automatically reconnecting to the server if a disconnection occurs.
- Implement API fetch error display for select dropdown.
- Fixed an issue where light theme briefly appears when pgAdmin loads or tools open, even when a dark or system UI theme is preferred.
- Fixed issues related to column range selection using shift + click.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.3. This release of pgAdmin 4 includes 4 new features and 14 bug fixes/housekeeping changes. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Add support for type constructors for PostGIS spatial types.
- Added ability to use SQL in the "DB Restriction" field.
- Add support for custom roles and role permissions management in pgAdmin.
- Added support for font ligatures.
Bugs/Housekeeping:
- Add Cache-Control no-cache,no-store,must-revalidate header to dynamically generated utils.js file.
- Fixed an issue where shift + click on rows/columns for range selection did not work in the query tool data output window.
- Fixed an issue where the debugger hangs when stepping into nested function/procedure.
- Ensure that graph data is updated even when the Dashboard tab is inactive.
- Fixed an issue where Ctrl/Cmd+A in cell editor would select all rows.
- Fixed an issue where drag and drop function with no parameters does not work.
- Fixed an issue where changes to foreign key constraints were not detected in the schema diff.
- Fixed an issue where the query tool went blank when converting history dates to the appropriate locale format.
- Fixed an issue where the user management tab is not opening in the classic layout.
- Allow OAuth 2 login using the username claim if the email is absent from the user profile.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.2. This release of pgAdmin 4 includes 24 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Added an ability to configure the font family for SQL editors.
- Added support to automatically open a file after it is downloaded in the desktop mode.
- Added support for post-connection SQL execution, which will be run automatically on each connection made to any database of the server.
- Add support for restoring plain SQL database dumps.
- Added support for creating Directory nodes in EPAS.
- Change icon buttons to show tooltips even when disabled.
- Add an option to load/replace the servers.json file on each container startup.
- Open user management in a separate tab instead of a dialog to enhance UI/UX.
Bugs/Housekeeping:
- Fixed an XSS vulnerability issue in the Query Tool and View/Edit Data (CVE-2025-2946).
- Fixed a remote code execution issue in the Query Tool and Cloud Deployment (CVE-2025-2945).
- Ensure that modal dialogs are not triggered more than once to avoid duplicates.
- Fixed an issue where pgAdmin should fallback to the main screen if the last opened screen is disconnected.
- Fixed an issue where the PSQL terminal displays keyname for non-alphanumeric keys.
- Change the stop/terminate icon at all the places for better UX.
- Fixed an issue where the query tool data grid did not respect the default value for columns of domain type when the domain had a default value.
- Ensure the newly added parameters in the server dialog are incorporated into the Import/Export Servers functionality.
- Fixed an issue where the query tool is crashing on macOS 15.4 due to a locale issue.
- Fixed an issue where the upgrade_check API returned an unexpected keyword argument 'cafile' due to changes in the urllib package supporting Python v3.13.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.1. This release of pgAdmin 4 includes 14 bug fixes and new features. For more details, please see the release notes.
Notable changes in this release include:
Features:
- Added an option to open the file in a new tab within the query tool.
- Add support for one-to-one relationship in the ERD tool.
- Enable the ability to close the 'Welcome' tab in the Query Tool/PSQL Workspace.
Bugs/Housekeeping:
- Added support for Python 3.13.
- Fixed an issue where pgAdmin does not support pg_vector column length/precision.
- Fixed an issue where pasting text containing JSON data into the query tool grid would result in incorrect parsing.
- Fixed an issue where the query tool was not treating IDENTITY columns as columns with default values when inserting new rows.
- Fixed an issue where the ERD tool failed to open a saved file containing parent-child relationships within the same table.
- Fixed Docker image entrypoint.sh email validation.
- Fixed an issue where the User Management and Change Password dialogs were hidden when selecting a menu while a workspace other than 'Default' was active.
- Fixed an issue where the column order displayed was incorrect for exclusion constraints with multiple columns.
- Fixed an issue where deleting rows in the query tool would delete all rows in the table when 'Select All Remaining Rows' was used.
- Ensure the saved passwords are decrypted with the correct encryption key for external authentication in server mode.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 9.0. This release of pgAdmin 4 includes 25 bug fixes and new features. For more details please see the release notes.
Note:(Windows only)
In this release, the 'vX' suffix has been removed from the application name. You will now see 'pgAdmin 4' as the app name. Starting from version 8, we also removed the 'vX' folder from the default installation path, allowing users to seamlessly upgrade to major versions. As a result of this change, if version 8 is already installed on the machine, the uninstaller will first run, followed by the installation of version 9.
Notable changes in this release include:
Features:
- Enhanced pgAdmin 4 with support for Workspace layouts.
Starting with this release, pgAdmin introduces two layout options: the Classic layout, a familiar design users know well, and the new Workspace layout, which provides a streamlined, distraction-free environment with dedicated areas for the Query Tool, PSQL, and Schema Diff tools. The Workspace layout is set as the default, but users can easily switch to the Classic layout through the preferences. In the Workspace layout, the Query Tool, PSQL, and Schema Diff tabs are organized and opened within their respective workspaces for a more focused experience.
- Added the MAINTAIN privilege for PostgreSQL version 17 and above.
- Add support for OAuth2 profile array response, which handles the GitHub Private Email ID issue.
- Change button labels and color in the delete confirmation dialog for all objects to improve UX.
Bugs/Housekeeping:
- Fixed an issue where pgadmin cannot install into the path with non-ASCII characters.
- Fixed an issue where filter dialog save fails when the PostgreSQL server/database connection is lost.
- Fixed an issue where an error message from the database server needs space between two sentences.
- Fixed an issue where the query tool throws utf-8 decode error when using a cursor with binary data.
- Fixed an issue where the option key was not registering in the PSQL tool.
- Fixed an issue where copying query tool output cell is not working if any SQL text is selected.
- Remove the option "With no data (concurrently)" from the Refresh MATERIALIZED VIEW context menu.
- Fixed an issue where Default Privileges and Privileges not working correctly.
- Fixed an issue where quotes were missing in the CREATE script for the tablespace.
- Change the logic of the setval function, so that the next nextval of sequence will return exactly the specified value.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 8.14. This release of pgAdmin 4 includes 23 bug fixes and new features. For more details please see the release notes.
Notable changes in this release include:
Features:
- Added support for adding tags on a server node.
- Allow setting NULL ordering for columns in view/edit data filter dialog.
- Show auto-complete column names in filtered rows dialog of table and filter options of view/edit data tool.
- Allow the use of a pgpass file in the pgAdmin container via Docker secrets.
- Add support for passing connection details as placeholders in the passexec command.
- Add support to deploy pgAdmin in a container with readOnlyRootFilesystem to true.
- Added support for a builtin locale provider in the Database dialog.
Bugs/Housekeeping:
- Fixed an issue where Ctrl/Cmd + A was not selecting all data in query tool data grid.
- Fixed an issue where querying a foreign table gives the error 'ForeignTableCommand' object has no attribute 'auto_commit'.
- Fixed an issue where pgAdmin crashes on accessing the dashboard state tab when database is super busy.
- Fixed an issue where a column name change in the edit dialog of the table node does not show the updated column name.
- Ensure the crypt key is retrieved correctly on backend server restart.
- Fixed an issue in schema diff where an error message popup was showing some garbage without any info.
- Add a user preference to enable/disable alternating row background colors in the data output of query tool.
- Fixed an issue where doing Ctrl/Cmd+C on a selected text in a cell editor of data output in the query tool copied the complete text.
- Fixed an issue where auto-width of wide columns in data output is incorrectly calculated.
- Ensure correct custom SSL certificate passed in connection string.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 8.13. This release of pgAdmin 4 includes 25 bug fixes and new features. For more details please see the release notes.
Notable changes in this release include:
Features:
- Replace infinite scrolling with pagination in query tool data output for better UX and performance.
- Add an object menu option to disconnect all server and database connections.
- Alternate the background color of rows to enhance readability.
- Allow to pass PGADMIN_CONFIG_CONFIG_DATABASE_URI from docker secrets.
- Format dashboard graph metrics for better readability.
- Added support for auto-detecting and setting the End-of-line character (LF/CRLF) in the query tool editor.
- Make the background color for the serial number and header cells distinct.
Bugs/Housekeeping:
- Updated the react-menu library from v2 to v4.
- Fixed an issue that allowed the Enter key to save data in the result grid text editor.
- Move 'About pgAdmin 4' to the app menu on macOS.
- Fixed an issue where the query tool was crashing when an empty geometry was being rendered.
- Fixed an issue where the Dashboard tab showed 'Something went wrong'.
- Fixed an issue where cursor selection is not visible in the PSQL tool.
- Allow OAuth2 params OAUTH2_NAME, OAUTH2_DISPLAY_NAME, OAUTH2_ICON, OAUTH2_BUTTON_COLOR to be optional.
- Add appropriate minimum width and height settings for desktop apps to avoid apps accidentally going below visibility levels.
- Fixed an issue where the graphical explain kept the node details open even after the plan changed.
- Fixed an issue in the debugger where the character data type function arguments were being truncated.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 8.11. This release of pgAdmin 4 includes 15 bug fixes and new features. For more details please see the release notes.
Notable changes in this release include:
Features:
- Add a home button to the geometry viewer to set the original zoom level when the viewer is opened.
Bugs/Housekeeping:
- Fixed an issue where refreshing the Schema Diff tool opened in a new tab caused an error.
- Fix server heartbeat logging error after deleting the server.
- Fixed an issue where the Generate Script ignored filter conditions when a parent node was selected.
- Fixed an issue where delete object(shortcut key) affected both text and Object Explorer items.
- Fix an issue where the ERD tool should be able to open saved pgerd file when using keyboard shortcuts.
- Fixed an issue where the REVOKE statement in the create script was throwing an error if the role contained special characters.
- Improve code highlighting in the query editor.
- Fix an issue where the wheel package is not getting installed on the arm64-based macOS version < 14.
- Fixed an issue where column resizing is not working in the search objects dialog
- Fixed an issue where the value in the find box is not updating with selected text in the editor if the find is already open and re-triggered.

The pgAdmin Development Team is pleased to announce pgAdmin 4 version 8.10. This release of pgAdmin 4 includes 29 bug fixes and new features. For more details please see the release notes.
Note: With this release, pgAdmin 4 has transitioned from NW.js to Electron
Notable changes in this release include:
Features:
- Add support for Postgres Server Logs for Text, CSV, and JSON format in plain and tabular formats.
- Add support for highlighting selection matches in the query editor.
- Add a keyboard shortcut to close the active tab panel.
Bugs/Housekeeping:
- Replace pgAdmin NW.js container with Electron container.
- Ensure that pgAdmin 4 is compatible with PostgreSQL v17.
- Fixed an issue where paste operation in query tool data grid should skip bytea columns and put the value as NULL instead.
- Ensure pgAdmin never makes network requests to Google etc.
- Fixed the permission denied issue for functions of the pgstattuple extension when accessing statistics with a non-admin user.
- Updated entrypoint.sh to utilize the email-validator package for email validation.
- Fixed an issue where users could not insert characters at the desired location, as it was added to the end of the line.
- Fixed an issue where users could not autofill their saved passwords in the connect server dialog in the browser.
- Fixed an issue where boolean values in node details of the graphical explain plan were not interpreted correctly.
- Ensure that pgAdmin works when opened in an iframe.