The pgAdmin Development Team has released pgAdmin 4 v9.17, the latest version of the popular open-source graphical management tool for PostgreSQL. This release includes 28 bug fixes and new features, with a strong emphasis on security, addressing seven vulnerabilities (CVE-2026-17346 through CVE-2026-17351, and CVE-2026-17566). The update is available now from the official website.
Key improvements and changes in this release include:
Security hardening: Fixed a tool-permission bypass where a user denied access to the Query Tool, Grant Wizard, or Schema Diff could still drive backend routes and Socket.IO handlers directly due to a missing permission check. This closes a significant authorization gap.
HTTP access log identity: The authenticated user's identity is now included in the HTTP access log, improving auditability and traceability of actions.
Helm chart alternative: Added an opt-in Gateway API HTTPRoute template to the Helm chart, providing an alternative to the existing Ingress for more flexible Kubernetes ingress configurations.
View Data row cap: A new preference allows you to set a maximum row count for the plain "View Data" action. Instead of always performing a full
SELECT *, the tool now respects your limit, making it practical for large tables without risking memory or performance issues.Custom XYZ tile provider: The Geometry Viewer now supports custom XYZ tile providers, letting you specify a URL, name, CRS, attribution, and max zoom level, alongside the built-in base layers. This enhances map visualization flexibility.
For developers, the row cap preference is particularly valuable: it prevents accidental full-table scans when exploring huge datasets, saving time and resources. The security fixes are critical—ensuring that permission denials are enforced at all backend entry points. Additionally, the improved access logs offer better security monitoring, and the new Helm chart option simplifies deployment in Kubernetes environments.
For the full list of changes, refer to the official release notes. This update is recommended for all pgAdmin 4 users, especially those managing large databases or multi-user environments.
Source: https://www.postgresql.org/about/news/pgadmin-4-v917-released-3356/