A malformed packet received during the SFTP connection handshake causes a Go panic in Wings, the server control plane for Pterodactyl, a free, open-source game server management panel, prior to version 1.13.0. The issue is fixed in version 1.13.0. This vulnerability affects administrators of Pterodactyl game servers, users of Wings, and security teams responsible for vulnerability management. They should [truncated]
CVE-2026-52855 is a critical vulnerability in Wings, the server control plane for Pterodactyl. A low-privileged user can exploit this vulnerability to read sensitive configuration data. The issue is fixed in version 1.12.3. Users should be aware of this vulnerability and take steps to upgrade. This vulnerability has a CVSS score of 9.9 and is considered CRITICAL. The CVE record was published on 2026-07-31 [truncated]
