CVE-2026-52855 pterodactyl CVE debrief

Who should care

Users of Pterodactyl Wings, especially those with low-privileged user accounts, should be aware of this vulnerability and take steps to upgrade to version 1.12.3 or later. This vulnerability can be exploited by low-privileged users to read sensitive configuration data. Users should review their current version and plan for an upgrade if necessary. Additionally, users should restrict access to sensitive configuration data and monitor for exploitation attempts. Security teams should prioritize this vulnerability and ensure that affected systems are remediated promptly. Vulnerability management and security teams should also review compensating controls for exposed systems while remediation is scheduled and verified. Asset inventory and monitoring teams should track exceptions, retest remediated assets, and close the item only after evidence is documented. This vulnerability affects Pterodactyl Wings deployments, and operators should confirm whether affected product deployments exist in managed environments and assign an owner for follow-up. Platform and security teams should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. They should also plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Compensating controls should be reviewed for exposed systems while remediation is scheduled and verified. Monitoring, detection, and logs should be checked for exposed assets that need extra review. Source tracking should be implemented to monitor for potential exploitation attempts. Rollback/change windows should be considered for remediation efforts. Asset inventory management should be used to track affected systems and prioritize remediation efforts. Security teams should also consider implementing additional security measures, such as restricting access to sensitive configuration data and monitoring for suspicious activity. By taking these steps, users can help prevent exploitation of this vulnerability and protect their systems from potential attacks. This vulnerability highlights the importance of keeping software up to date and having robust security措施 in P

Technical summary

CVE-2026-52855 is a CRITICAL vulnerability in Wings, the server control plane for Pterodactyl. Prior to version 1.12.3, {{config.}} placeholders in egg configuration-file templates allow low-privileged users to read sensitive configuration data, including {{config.token}}, {{config.token_id}}, and {{config.docker.registries}}. The issue is fixed in version 1.12.3. This vulnerability has a CVSS score of 9.9 and is considered CRITICAL.

Defensive priority

CVE-2026-52855 is rated CRITICAL with a CVSS score of 9.9. Users with low privileges can exploit this vulnerability to read sensitive configuration data.

Recommended defensive actions

• Upgrade to Wings version 1.12.3 or later
• Restrict access to sensitive configuration data
• Monitor for exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.

Evidence notes

The CVE-2026-52855 issue exists in Wings, the server control plane for Pterodactyl, prior to version 1.12.3. The vulnerability allows low-privileged users to read sensitive configuration data, including {{config.token}}, {{config.token_id}}, and {{config.docker.registries}}. This issue is fixed in version 1.12.3. Evidence is limited; further verification is recommended.

Official resources