pgAdmin 4 versions before 9.19 have a vulnerability in the materialized view refresh feature where the target database name is passed unchanged to psql's --dbname argument. This allows a specially crafted database name containing connection string keywords to override connection parameters, potentially redirecting connections to arbitrary hosts and exposing saved server passwords. The issue was fixed by routing the database name through a helper function to ensure it is treated strictly as a database name.