Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered

🗓️ 20 Jan 2026 16:30:54Reported by GitHub Advisory DatabaseType

Wings reprocesses activity logs due to database parameter limits, causing duplicate entries and panel flood.

Reporter	Title	Published	Views	Family All 21
ATTACKERKB	CVE-2026-21696	19 Jan 202619:25	–	attackerkb
Circl	CVE-2026-21696	19 Jan 202619:02	–	circl
CNNVD	Wings Resource Management Error Vulnerability	19 Jan 202600:00	–	cnnvd
CVE	CVE-2026-21696	19 Jan 202619:25	–	cve
Cvelist	CVE-2026-21696 Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered	19 Jan 202619:25	–	cvelist
EUVD	EUVD-2026-3295	20 Jan 202616:30	–	euvd
NVD	CVE-2026-21696	19 Jan 202620:15	–	nvd
OSV	CVE-2026-21696 Endless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered	19 Jan 202619:25	–	osv
OSV	GHSA-2497-GP99-2M74 Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered	20 Jan 202616:30	–	osv
OSV	GO-2026-4329 Pterodactyl endlessly reprocesses/reuploads activity log data due to SQLite max parameters limit not being considered in github.com/pterodactyl/wings	3 Feb 202620:37	–	osv

Vulners

Node

pterodactyl wingsRange1.7.0–1.12.0go

Source	Link
github	www.github.com/pterodactyl/wings/security/advisories/GHSA-2497-gp99-2m74
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-21696
github	www.github.com/pterodactyl/panel/commit/09caa0d4995bd924b53b9a9e9b4883ac27bd5607
github	www.github.com/pterodactyl/panel/releases/tag/v1.12.0
github	www.github.com/pterodactyl/wings/blob/9ffbcdcdb1163da823cf9959b9602df9f7dcb54a/internal/cron/activity_cron.go
github	www.github.com/pterodactyl/wings/blob/9ffbcdcdb1163da823cf9959b9602df9f7dcb54a/internal/cron/sftp_cron.go
github	www.github.com/advisories/GHSA-2497-gp99-2m74

02 Feb 2026 22:22Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.16.5

CVSS 48.3

EPSS0.00079

SSVC