Vendor
Windmill Labs
10 known vulnerabilities in products by Windmill Labs, 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-23696 | Windmill < 1.603.3 File Ownership Handling SQLi RCE | 9.9 | |
| High | CVE-2026-22683 | Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE | 8.8 | |
| High | CVE-2026-29059 | Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly | 7.5 | |
| Medium | CVE-2026-72539 | Windmill Labs Windmill - Information Disclosure | 6.5 | |
| High | CVE-2026-47107 | Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration | 8.1 | |
| Medium | CVE-2026-54136 | Windmill: Incorrect Authorization | — | |
| High | CVE-2026-33881 | Windmill: Code Injection | 7.2 | |
| Medium | CVE-2026-72541 | Windmill Labs Windmill - Missing Authorization | 6.5 | |
| Medium | CVE-2026-72542 | Windmill Labs Windmill - Missing Authorization | 5.4 | |
| Low | CVE-2026-26964 | Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members | 2.7 |
News
Products
| Windmill | 8 | 0 |