A vulnerability in Pterodactyl Wings allows changing file permissions outside the server container by exploiting symlinks. The function responsible for changing file permissions does not prevent following symlinks, enabling modification of host files' permissions. This affects versions from 1.11.9 up to but not including 1.12.2.