CVE-2025-68954

creationtimestamp| type| source ---|---|--- 2026-01-06 02:02:01+00:00| seen| Telegram/FEXfoeJAqOIroyUDCRdgqul6wp9Eck5nAsZ9jdmneKfShFo...

CVE-2025-68954

CVE-2025-68954 affects Pterodactyl’s SFTP subsystem where active SFTP sessions are not revoked when a user is removed or has permissions reduced. Multiple sources describe that credentials are checked at handshake, but not re-validated afterward, allowing a user who was connected to maintain acce...