You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
PasswordExecCommand from servers.json ignored in Server mode since pgAdmin 9.15 (works in 9.14) #10114
Please note that security bugs or issues should be reported to [email protected].
Describe the bug
PasswordExecCommand in servers.json appears to be ignored in Server mode starting with pgAdmin4 9.15.
The same setup works correctly in 9.14, and is still broken in 9.16.
This affects shared server definitions imported from servers.json: pgAdmin does not execute the configured PasswordExecCommand, so the password is not resolved as expected.
To Reproduce
Run pgAdmin4 in Server mode using container image 9.15 (also reproducible in 9.16).
Import shared server definitions from servers.json containing PasswordExecCommand.
Ensure server-pass execution is explicitly enabled via environment variables:
PGADMIN_CONFIG_SERVER_MODE=True
PGADMIN_CONFIG_ENABLE_SERVER_PASS_EXEC_CMD=True
Open the imported shared server and attempt to connect.
Observe that PasswordExecCommand is ignored (password is not fetched/executed).
Control check:
6. Repeat the same setup with pgAdmin4 9.14.
7. Observe expected behavior: PasswordExecCommand works.
Expected behavior
In Server mode, for shared servers imported from servers.json, pgAdmin should execute PasswordExecCommand when PGADMIN_CONFIG_ENABLE_SERVER_PASS_EXEC_CMD=True, as in version 9.14.
Error message
No clear UI error message specific to PasswordExecCommand; behavior suggests the command is silently ignored.
Screenshots
Can be provided if needed.
Desktop (please complete the following information):
Duplicate of #10249, which pins down the exact cause: since the CVE-2026-7813 fix, manager.passexec is unconditionally cleared for any non-owner of a shared server in server mode, so PasswordExecCommand stops being honoured for standard users on servers imported via pgadmin_servers.json. Continuing discussion over there.
Activity
dpage commentedon Aug 19, 2026
Duplicate of #10249, which pins down the exact cause: since the CVE-2026-7813 fix,
manager.passexecis unconditionally cleared for any non-owner of a shared server in server mode, soPasswordExecCommandstops being honoured for standard users on servers imported viapgadmin_servers.json. Continuing discussion over there.PasswordExecCommandsilently ignored for shared-server non-owners in SERVER_MODE despiteENABLE_SERVER_PASS_EXEC_CMD=True(regression in 9.15) #10249