Resource exhaustion in Pterodactyl Panel

CVE-2025-69198

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources (e.g. databases, port allocations, or backups) that can exist for an individual server. T…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.001 (19.7th percentile) — read the EPSS interpretation.

Affected products

Pterodactyl Panel — versions < 1.12.0

Weakness classification (CWE)

References

https://github.com/pterodactyl/panel/security/advisories/GHSA-jw2v-cq5x-q68g (x_refsource_CONFIRM)
https://github.com/pterodactyl/panel/commit/09caa0d4995bd924b53b9a9e9b4883ac27bd5607 (x_refsource_MISC)