tocsin

CVE-2025-68954

3 advisories.

Packagist/pterodactyl/panel CVE-2025-68954: high

Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

Action: Upgrade pterodactyl/panel to 1.12.0 or later.

composer require pterodactyl/panel:1.12.0

Affected

introducedfixedlast affected
01.12.0-

Fixed versions

1.12.0

Sources

CVE-2025-68954 · published · modified · JSON

Go/github.com/pterodactyl/wings CVE-2025-68954: high

Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced

Action: Upgrade github.com/pterodactyl/wings to 1.12.0 or later.

go get github.com/pterodactyl/wings@v1.12.0

Affected

introducedfixedlast affected
01.12.0-

Fixed versions

1.12.0

Sources

CVE-2025-68954 · published · modified · JSON

Go/github.com/pterodactyl/wings CVE-2025-68954: unknown

Pterodactyl does not revoke SFTP access when server is deleted or permissions reduced in github.com/pterodactyl/wings

Action: Upgrade github.com/pterodactyl/wings to 1.12.0 or later.

go get github.com/pterodactyl/wings@v1.12.0

Affected

introducedfixedlast affected
01.12.0-

Fixed versions

1.12.0

Sources

CVE-2025-68954 · published · modified · JSON