GHSA-rhq6-9rgh-v45c
Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container
In wings/internal/ufs/fs_unix.go (line 92-94), this function is defined and is used to change permissions of files in the server:
func (fs *UnixFS) fchmodat(op string, dirfd int, name string, mode FileMode) error {
return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), 0), op, name)
}
This call to the unix function fchmodat(int fd, char* name, mode_t mode, int flags) does not have the flag AT_SYMLINK_NOFOLLOW set, and Wings neither checks or validate if the target file is a symlink. This allows one to change permissions of files or folders outside of the server container by making symlinks to existing files in the host and then chmoding it.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
What each source reports
GitHub Advisories Score used
Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container
In wings/internal/ufs/fs_unix.go (line 92-94), this function is defined and is used to change permissions of files in the server:
func (fs *UnixFS) fchmodat(op string, dirfd int, name string, mode FileMode) error {
return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), 0), op, name)
}
This call to the unix function fchmodat(int fd, char* name, mode_t mode, int flags) does not have the flag AT_SYMLINK_NOFOLLOW set, and Wings neither checks or validate if the target file is a symlink. This allows one to change permissions of files or folders outside of the server container by making symlinks to existing files in the host and then chmoding it.
- Record
GHSA-rhq6-9rgh-v45c- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
OSV
Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container
In wings/internal/ufs/fs_unix.go (line 92-94), this function is defined and is used to change permissions of files in the server:
func (fs *UnixFS) fchmodat(op string, dirfd int, name string, mode FileMode) error {
return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), 0), op, name)
}
This call to the unix function fchmodat(int fd, char* name, mode_t mode, int flags) does not have the flag AT_SYMLINK_NOFOLLOW set, and Wings neither checks or validate if the target file is a symlink. This allows one to change permissions of files or folders outside of the server container by making symlinks to existing files in the host and then chmoding it.
- Record
GHSA-rhq6-9rgh-v45c- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
OSVGO-2026-5814No score
Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wings
Pterodactyl Wings: Chmod operation can be used to change permissions of files outside of the server container in github.com/pterodactyl/wings
- Record
GO-2026-5814- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/pterodactyl/wingsGo | 1.11.9 up to 1.12.2 | 1.12.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-rhq6-9rgh-v45c is a medium vulnerability (CVSS 5.0) in github.com/pterodactyl/wings, published June 26, 2026. No source lists public exploit code. Fixed in github.com/pterodactyl/wings 1.12.2.