CVE-2026-52855 in Wings
Riassunto
di MITRE • 31/07/2026
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file templates allow a low-privileged user to read {{config.token}}, {{config.token_id}}, and {{config.docker.registries}} from the full daemon configuration. This issue is fixed in version 1.12.3.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.