← Database

CVE-2026-52855

CRITICAL CVSS: 9.9 Published: 2026-07-31 Modified: 2026-07-31

Description

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file templates allow a low-privileged user to read {{config.token}}, {{config.token_id}}, and {{config.docker.registries}} from the full daemon configuration. This issue is fixed in version 1.12.3.

Affected Platforms

Unknown

Weakness Type

CWE-200, CWE-522

References