CyberRota Analysis
AI-GeneratedA vulnerability in the Wings server control plane for Pterodactyl allows low-privileged users to access sensitive configuration data, including tokens and registry information, from the Docker daemon configuration. This critical flaw, with a CVSS score of 9.9, poses a significant risk to the security of game server management environments. Organizations using affected versions prior to 1.12.3 should prioritize upgrading to mitigate potential unauthorized access to sensitive information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}} placeholders in egg configuration-file templates allow a low-privileged user to read {{config.token}}, {{config.token_id}}, and {{config.docker.registries}} from the full daemon configuration. This issue is fixed in version 1.12.3.