[CRITICAL] Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization

PKSA-773t-3wms-bb2z CVE-2026-26016 GHSA-g7vw-f8p5-c728

Affected package: pterodactyl/panel

Affected version: <1.12.1

Reported by:
GitHub