Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
pterodactyl/panel
1.0-develop @ c39a7be
182
Fixes
9
CVEs
CRITICAL
Peak severity
27.8%
Coverage
Highlights
Auth Bypass: 107 prior fixes. Scrutinize any change in this area.
app/Http/Controllers/Api/Remote/SftpAuthenticationController.php: most-fixed (9 issues). Treat as high-risk during review.
84 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: SFTP authentication logic historically suffered from critical flaws, including assigning wildcard permissions instead of resolved scopes, incorrect user validation when checking registered public keys, and failing to confirm user key matches, which bypasses access controls.
Auth Bypass: Missing relational integrity checks between requested resources (such as allocations, backups, and databases) and the active server context allowed multi-tenant authorization bypasses until resolved by specialized middleware.
Auth Bypass: The 2FA login verification checkpoint historically lacked proper timing-safe comparisons, state clearing mechanisms, and token reuse prevention, which resulted in critical authentication bypass vulnerabilities.