Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change in github.com/pterodactyl/wings

Mô tả

Tham khảo

• pterodactyl/panel security advisory · ADVISORY
• pterodactyl/panel commit 0e74f3a · WEB
• pterodactyl/panel release v1.12.1 · WEB

Lỗ hổng khác của github.com/pterodactyl/wings

• CVE-2026-52856CAO 7.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet rec…
• CVE-2026-52855NGHIÊM TRỌNG 9.9Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholde…
• CVE-2026-52857TRUNG BÌNH 5.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, …
• CVE-2026-54593CAO 8.1Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/f…
• GO-2026-5814Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing…