Executive brief
Pterodactyl websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks in github.com/pterodactyl/wings
Affected products
- Go github.com/pterodactyl/wings
Junglewise Threat Intelligence
CVE-2025-69199: GO-2026-4331 - Pterodactyl websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks in github.com/pterodactyl/wings
CVE-2025-69199 · Severity: low · CVSS 3.1 · Published 2026-02-03
Technologies: github.com/pterodactyl/wings (Go). Vendors: Go.
Related threats
- Pterodactyl Wings denial of service in SFTP handshake
- Pterodactyl Wings sensitive information disclosure in egg templates
- Pterodactyl Wings memory exhaustion in configuration file parsers
- Pterodactyl Panel and Wings privilege escalation via JWT scope reuse
- GO-2026-5814 - Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing