Sensitive configuration exposure in Pterodactyl Wings templating engine (CVE-2026-52855)

Pterodactyl Wings exposes its entire daemon configuration to the egg configuration-file templating engine without restricting which paths may be read. A low-privileged user who can set egg variable values may inject `{{config.*}}` placeholders that are resolved by Wings and written to files accessible via the file manager or SFTP, enabling exfiltration of the node daemon token and container-registry credentials. Possession of the daemon token allows an attacker to forge authentication tokens and compromise every server on the affected node. Affected versions: - < 1.12.2 We recommend updating to: 1.12.3. CVSS 9.9 · our assessment: act_now Reference: https://github.com/pterodactyl/wings/security/advisories/GHSA-pfvc-3p5h-x7h6 Details: https://vuln.today/cve/CVE-2026-52855