CVE-2026-54593

3 advisories.

Packagist/pterodactyl/panel CVE-2026-54593: high 8.1

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

Action: Upgrade pterodactyl/panel to 1.12.3 or later.

composer require pterodactyl/panel:1.12.3

Affected

introduced	fixed	last affected
0	1.12.3	-

Fixed versions

1.12.3

Sources

CVE-2026-54593 · published 2026-07-28T15:43:25Z · modified 2026-08-18T15:10:50.705650409Z · JSON

Go/github.com/pterodactyl/wings CVE-2026-54593: high 8.1

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions

Action: Upgrade github.com/pterodactyl/wings to 1.12.2 or later.

go get github.com/pterodactyl/wings@v1.12.2

Affected

introduced	fixed	last affected
0	1.12.2	-

Fixed versions

1.12.2

Sources

CVE-2026-54593 · published 2026-07-28T15:43:25Z · modified 2026-08-18T15:10:50.705650409Z · JSON

Go/github.com/pterodactyl/wings CVE-2026-54593: unknown

Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions in github.com/pterodactyl/wings

Action: Upgrade github.com/pterodactyl/wings to 1.12.2 or later.

go get github.com/pterodactyl/wings@v1.12.2

Affected

introduced	fixed	last affected
0	1.12.2	-

Fixed versions

1.12.2

Sources

CVE-2026-54593 · published 2026-08-18T14:32:29Z · modified 2026-08-18T15:00:21.779161573Z · JSON