CVE-2026-52855
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Jul 31, 2026
Vendor
unknown
Description
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, { {config.} } placeholders in egg configuration-file templates allow a low-privileged user to read { {config.token} }, { {config.token_id} }, and { {config.docker.registries} } from the full daemon configuration. This issue is fixed in version 1.12.3.