Security Advisory catalog CVE-2026-52857 CVE-2026-52857 Published
Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM Overview Affected History Connections
cve-program · CVE-2026-52857 Published wings Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "pterodactyl",
"product": "wings",
"versions": [
{
"version": "< 1.13.0",
"status": "affected"
}
]
}
nvd · CVE-2026-52857 Published No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.
osv · GHSA-q6hh-gp44-4hcm Published github.com/pterodactyl/wings Go
SEMVER · introduced 0 → fixed 1.13.0
osv · GO-2026-6159 Published github.com/pterodactyl/wings Go
SEMVER · introduced 0 → fixed 1.13.0