Skip to content
OpenAdvisories

Package · Packagist

pterodactyl/panel

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-26016

    Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization

    Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.1, a missing authorization check in multiple controllers allows any user with access to a node secret token to fetch information about a…

    pterodactyl panel pterodactyl/panel Packagist
  • Critical 10.0
    CVE-2025-49132 Public exploit Scanner template EPSS 54%

    Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

    Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the…

    pterodactyl panel pterodactyl/panel Packagist