pgAdmin versions up to 9.9 contain an LDAP injection vulnerability in the LDAP authentication process. This flaw allows attackers to inject special LDAP characters into the username, causing excessive processing by the LDAP server and client, resulting in a denial of service condition. The vulnerability is fixed in version 9.10.