id: PYSEC-2026-1768
published: "2026-07-07T11:45:40.517081Z"
modified: "2026-07-07T17:25:00.604139Z"
aliases:
- CVE-2024-4215
- GHSA-2mvc-557g-5638
summary: pgAdmin is affected by a multi-factor authentication bypass vulnerability
details: pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account’s MFA enrollment status.
affected:
- package:
    name: pgadmin4
    ecosystem: PyPI
    purl: pkg:pypi/pgadmin4
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: "8.6"
  versions:
  - "4.20"
  - "4.22"
  - "4.23"
  - "4.24"
  - "4.25"
  - "4.26"
  - "4.27"
  - "4.28"
  - "4.29"
  - "4.30"
  - "5.0"
  - "5.1"
  - "5.2"
  - "5.3"
  - "5.4"
  - "5.5"
  - "5.6"
  - "5.7"
  - "6.10"
  - "6.11"
  - "6.12"
  - "6.13"
  - "6.14"
  - "6.15"
  - "6.16"
  - "6.17"
  - "6.18"
  - "6.19"
  - "6.2"
  - "6.20"
  - "6.21"
  - "6.3"
  - "6.4"
  - "6.5"
  - "6.6"
  - "6.7"
  - "6.8"
  - "6.9"
  - "7.0"
  - "7.1"
  - "7.2"
  - "7.3"
  - "7.4"
  - "7.5"
  - "7.6"
  - "7.7"
  - "7.8"
  - "8.0"
  - "8.1"
  - "8.2"
  - "8.3"
  - "8.4"
  - "8.5"
references:
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2024-4215
- type: WEB
  url: https://github.com/pgadmin-org/pgadmin4/issues/7425
- type: WEB
  url: https://github.com/pgadmin-org/pgadmin4/commit/f4761f55f7cf6d56d6c5129f921393b0b47fd976
- type: PACKAGE
  url: https://github.com/pgadmin-org/pgadmin4
- type: WEB
  url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2YFVCB4HCXU3FQBZ5XTWJZWSZUDNCXE
- type: PACKAGE
  url: https://pypi.org/project/pgadmin4
- type: ADVISORY
  url: https://github.com/advisories/GHSA-2mvc-557g-5638
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
- type: CVSS_V4
  score: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L