GO-2026-5814: Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wings

  GO-2026-6120: Pterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions in github.com/pterodactyl/wings

  GO-2026-6156: Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service in github.com/pterodactyl/wings

  GO-2026-6158: Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings

  GO-2026-6159: Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM in github.com/pterodactyl/wings