Resource Management Flaw in Pterodactyl Game Server Management Panel
CVE-2025-69198

6MEDIUM

Key Information:

Vendor

Pterodactyl

Status
Panel
Vendor
CVE Published:
19 January 2026

What is CVE-2025-69198?

The Pterodactyl Game Server Management Panel is susceptible to a resource management flaw that allows malicious users to exceed the resource limits of individual servers. In versions prior to 1.12.0, the validation of resource requests occurs too early in the request cycle, permitting attackers to flood the system with simultaneous requests. This results in the creation of excessive resources, such as databases and allocations, which undermines the intended resource rationing and can lead to denial of service for legitimate users. Updating to version 1.12.0 addresses this issue.

Affected Version(s)

panel < 1.12.0

References

https://github.com/pterodactyl/panel/security/advisories/...
x_refsource_CONFIRM
https://github.com/pterodactyl/panel/commit/09caa0d4995bd...
x_refsource_MISC

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.