Skip to content
OpenAdvisories

Product · pterodactyl

wings

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-52857

    Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM

    Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust…

    pterodactyl wings github.com/pterodactyl/wings Go
  • Medium 6.4
    CVE-2024-34068

    Server-side Request Forgery during remote file pull in Pterodactyl wings

    Pterodactyl wings is the server control plane for Pterodactyl Panel. An authenticated user who has access to a game server is able to bypass the previously implemented access control (GHSA-6rg3-8h8x-5xfv) that prevents accessing internal endpoints of the node…

    pterodactyl wings github.com/pterodactyl/wings Go
  • Medium 6.5
    CVE-2021-32699

    Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

    Wings is the control plane software for the open source Pterodactyl game management system. All versions of Pterodactyl Wings prior to `1.4.4` are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious use…

    pterodactyl wings github.com/pterodactyl/wings Go