Vulnerabilities

TI-2026-17479 CVE-2026-21696 · GHSA-2497-gp99-2m74

Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered

HIGH 75

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00552 Published 2026-01-19 Fixed in 1.12.0 CWE-400

TI-2025-42653 CVE-2025-69199 · GHSA-8w7m-w749-rx98

Uncontrolled resource consumption in pterodactyl panel

LOW 36

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-01-19 Fixed in 1.12.0 CWE-400

TI-2025-42410 CVE-2025-68954 · GHSA-8c39-xppg-479c

Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

LOW 34

Pterodactyl is a free, open-source game server management panel.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00242 Published 2026-01-06 Fixed in 1.12.0 CWE-613

TI-2024-22524 CVE-2024-34066 · GHSA-gqmf-jqgv-v8fw

Arbitrary File Write/Read in Pterodactyl wings

MEDIUM 40

Pterodactyl wings is the server control plane for Pterodactyl Panel.

CVSS 3.1HIGH 8.5 Network High privileges User interaction EPSS 0.00544 Published 2024-05-03 Fixed in 1.11.12 CWE-552

TI-2024-22526 CVE-2024-34068 · GHSA-qq22-jj8x-4wwv

Server-side Request Forgery during remote file pull in Pterodactyl wings

LOW 29

Pterodactyl wings is the server control plane for Pterodactyl Panel.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00394 Published 2024-05-03 Fixed in 1.11.12 CWE-284

TI-2024-17963 CVE-2024-27102 · GHSA-494h-9924-xww9

Improper isolation of server file access in github.com/pterodactyl/wings

HIGH 76

Wings is the server control plane for Pterodactyl Panel.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00545 Published 2024-03-13 Fixed in 1.11.9 CWE-22

TI-2023-15384 CVE-2023-32080 · GHSA-p744-4q6p-hvc2

Wings vulnerable to escape to host from installation container

MEDIUM 43

Wings is the server control plane for Pterodactyl Panel.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.00917 Published 2023-05-10 Fixed in 1.7.5, 1.11.6 CWE-250

TI-2023-10630 CVE-2023-25168 · GHSA-66p8-j459-rq63

Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings

MEDIUM 43

Wings is Pterodactyl's server control plane.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00956 Published 2023-02-08 Fixed in 1.7.4, 1.11.4 CWE-59

TI-2023-10614 CVE-2023-25152 · GHSA-p8r3-83r8-jwj5

Symbolic Link (Symlink) Following in github.com/pterodactyl/wings

LOW 39

Wings is Pterodactyl's server control plane.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00682 Published 2023-02-08 Fixed in 1.7.3, 1.11.3 CWE-59

TI-2021-12367 CVE-2021-32699 · GHSA-jj6m-r8jc-2gp7

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

LOW 28

Wings is the control plane software for the open source Pterodactyl game management system.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00265 Published 2021-06-22 Fixed in 1.4.4 CWE-400

Vulnerabilities

Filters