Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change in github.com/pterodactyl/wings

概要

参考情報

• pterodactyl/panel security advisory · ADVISORY
• pterodactyl/panel commit 0e74f3a · WEB
• pterodactyl/panel release v1.12.1 · WEB

github.com/pterodactyl/wings のその他の脆弱性

• CVE-2026-52856高 7.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet rec…
• CVE-2026-52855緊急 9.9Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholde…
• CVE-2026-52857中 5.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, …
• CVE-2026-54593高 8.1Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/f…
• GO-2026-5814Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing…