CVE-2026-35202
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jun 02, 2026
Vendor
unknown
Description
Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Version 1.12.3 patches the issue.