Resource exhaustion in Pterodactyl Panel
CVE-2025-69199
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.0, websockets within wings lack proper rate limiting and throttling. As a result a malicious user can open a large n…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.001 (23.8th percentile) — read the EPSS interpretation.
Affected products
- Pterodactyl Panel — versions < 1.12.0
Weakness classification (CWE)
References
- https://github.com/pterodactyl/panel/security/advisories/GHSA-8w7m-w749-rx98 (x_refsource_CONFIRM)