Executive brief
Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered in github.com/pterodactyl/wings
Affected products
- Go github.com/pterodactyl/wings
Junglewise Threat Intelligence
CVE-2026-21696: GO-2026-4329 - Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered in github.com/pterodac
CVE-2026-21696 · Severity: low · CVSS 3.1 · Published 2026-02-03
Technologies: github.com/pterodactyl/wings (Go). Vendors: Go.
Related threats
- Pterodactyl Wings denial of service in SFTP handshake
- Pterodactyl Wings sensitive information disclosure in egg templates
- Pterodactyl Wings memory exhaustion in configuration file parsers
- Pterodactyl Panel and Wings privilege escalation via JWT scope reuse
- GO-2026-5814 - Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wing