Windmill - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2026-05-19.

Products

CVE-2026-47107 - CVSS 8.6 (high), 2026-05-19: Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without…
CVE-2026-22683 - CVSS 8.8 (high), 2026-04-07: Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity…
CVE-2026-23696 - CVSS 9.9 (critical), 2026-04-07: Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows…
CVE-2026-33881 - CVSS 7.3 (high), 2026-03-27: Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Workspace environment variable values are…
CVE-2026-29059 - CVSS 7.5 (high), 2026-03-06: Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path…
CVE-2026-26964 - CVSS 2.7 (low), 2026-02-20: Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6 and below allow non-admin users to…