CVE-2023-32080: Wings vulnerable to escape to host from installation container
Summary
CVE-2023-32080: Wings vulnerable to escape to host from installation container. Affects github.com/pterodactyl/wings across 2 version ranges.
< 1.7.5
>= 1.11.0, < 1.11.6
Fixed in 1.7.5 or 1.11.6, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wings is a Go package (github.com/pterodactyl/wings) that is used for managing game servers. It provides functionality for creating, managing, and monitoring game servers within a containerized environment. Wings is widely used by administrators to deploy and manage game servers for various games. However, certain versions of Wings are vulnerable to an attack that allows an attacker to escape the container and gain access to the host system.
Vulnerability Detail
The vulnerability in Wings arises when an attacker is able to modify a server's install script or when the install script executes code supplied by the user. This can happen through environment variables or commands that execute commands based on user data. By exploiting this vulnerability, an attacker can execute arbitrary commands with escalated privileges, potentially leading to unauthorized access to the host system. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.0.
How To Fix
Latest published version: v1.13.4 as of 22 Oct 2026
go get github.com/pterodactyl/wings@v1.13.4Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 1.7.51.7.5go get github.com/pterodactyl/wings@v1.7.5 -
>= 1.11.0, < 1.11.61.11.6go get github.com/pterodactyl/wings@v1.11.6
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
Running Wings with a rootless container runtime may mitigate the severity of any attacks. However, it is important to note that the majority of users are using container runtimes that run as root as per the documentation. Another possible workaround is to enable SELinux, which may prevent attackers from performing certain operations against the host system. However, privileged containers still have a lot of freedom even on systems with SELinux enabled.
Conclusion
The vulnerability in Wings allows an attacker to escape the container and gain unauthorized access to the host system. To mitigate this risk, it is crucial to upgrade to the patched versions of Wings: v1.11.6 for v1.11.x and v1.7.5 for v1.7.x. Running Wings with a rootless container runtime or enabling SELinux may provide some additional protection. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for github.com/pterodactyl/wings →
FAQ
This vulnerability allows an attacker to escape the container and gain unauthorized access to the host system running Wings. They can execute arbitrary commands with escalated privileges, potentially leading to further compromise of the system.
Anyone running the affected versions of Wings (v1.11.x and v1.7.x) is vulnerable to this attack. It is important to upgrade to the patched versions (v1.11.6 and v1.7.5) to mitigate the risk.
To fix this vulnerability, upgrade to the patched versions of Wings: v1.11.6 for v1.11.x and v1.7.5 for v1.7.x. These versions address the vulnerability and prevent the escape to the host from the installation container.
Running Wings with a rootless container runtime may mitigate the severity of attacks. However, most users are using container runtimes that run as root. Enabling SELinux may also provide some protection, but privileged containers still have significant freedom.
This vulnerability was a known attack vector, but certain eggs (the data structure that holds the install scripts) had an issue where they unknowingly executed shell commands with escalated privileges provided by untrusted user data.
Related vulnerabilities
Recent vulnerabilities recorded for github.com/pterodactyl/wings.
