Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change in github.com/pterodactyl/wings

Description

References

• pterodactyl/panel security advisory · ADVISORY
• pterodactyl/panel commit 0e74f3a · WEB
• pterodactyl/panel release v1.12.1 · WEB

Weitere Schwachstellen in github.com/pterodactyl/wings

• CVE-2026-52856HOCH 7.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet rec…
• CVE-2026-52855KRITISCH 9.9Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholde…
• CVE-2026-52857MITTEL 5.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, …
• CVE-2026-54593HOCH 8.1Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/f…
• GO-2026-5814Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing…