CVE-2023-25152

Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their containers to privileged mode, or potentially add ssh authorized keys to allow the attacker access to a remote shell on the target machine. In order to use this exploit, an attacker must have an existing "server" allocated and controlled by the Wings Daemon. This vulnerability has been resolved in version `v1.11.3` of the Wings Daemon, and has been back-ported to the 1.7 release series in `v1.7.3`. Anyone running `v1.11.x` should upgrade to `v1.11.3` and anyone running `v1.7.x` should upgrade to `v1.7.3`. There are no known workarounds for this vulnerability. ### Workarounds None at this time.

• CWE-59

• https://github.com/pterodactyl/wings/commit/dac9685298c3c1c49b3109fa4241aa88272b9f14Patch, Vendor Advisory
• https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5Vendor Advisory
• https://github.com/pterodactyl/wings/commit/dac9685298c3c1c49b3109fa4241aa88272b9f14Patch, Vendor Advisory
• https://github.com/pterodactyl/wings/security/advisories/GHSA-p8r3-83r8-jwj5Vendor Advisory

Published

Feb 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25147An issue in the Trend Micro Apex One agent could allow an at…6.7
• CVE-2023-25148A security agent link following vulnerability in Trend Micro…7.8
• CVE-2023-25149TimescaleDB, an open-source time-series SQL database, has a …8.8
• CVE-2023-2515Mattermost fails to restrict a user with permissions to edit…8.8
• CVE-2023-25150Nextcloud office/richdocuments is an office suit for the nex…5.7
• CVE-2023-25151opentelemetry-go-contrib is a collection of extensions for O…7.5
• CVE-2023-25153containerd is an open source container runtime. Before versi…5.5
• CVE-2023-25154Misskey is an open source, decentralized social media platfo…6.1
• CVE-2023-25155Redis is an in-memory database that persists on disk. Authen…6.5
• CVE-2023-25156Kiwi TCMS, an open source test management system, does not i…9.8
• CVE-2023-25157GeoServer is an open source software server written in Java …9.8
• CVE-2023-25158GeoTools is an open source Java library that provides tools …9.8