VULNERABILITY INTELLIGENCE
CVE-2026-35202
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-06-02
Last modified2026-07-22
Description
Pterodactyl is a free, open-source game server management panel. Prior to version 1.12.3, the Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Version 1.12.3 patches the issue.
Weakness classification
- security-advisories@github.com: CWE-367