{"action":"Upgrade pterodactyl/panel to 1.12.1 or later.","affected":[{"fixed":"1.12.1","introduced":"0"}],"component":"pterodactyl/panel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.12.1"],"ghsa_id":"GHSA-hr7j-63v7-vj7g","id":"tcs_01M5KF3WZ4BZYQVBTA9HW7VBZB","modified_at":"2026-02-23T19:41:19.875455Z","published_at":"2026-02-17T17:15:18Z","references":["https://osv.dev/vulnerability/GHSA-hr7j-63v7-vj7g","https://github.com/pterodactyl/panel/security/advisories/GHSA-hr7j-63v7-vj7g","https://github.com/pterodactyl/panel/commit/0e74f3aadec89405751ec602c77fc1d030a417c0","https://github.com/pterodactyl/panel","https://github.com/pterodactyl/panel/releases/tag/v1.12.1"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-hr7j-63v7-vj7g","url":"https://osv.dev/vulnerability/GHSA-hr7j-63v7-vj7g"}],"summary":"Pterodactyl Panel's SFTP sessions remain active after user account deletion or password change"}