Product by Windmill Labs
Windmill
9 known vulnerabilities in Windmill (Windmill Labs), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-22683 | Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE | 8.8 | |
| High | CVE-2026-29059 | Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly | 7.5 | |
| Medium | CVE-2026-72539 | Windmill Labs Windmill - Information Disclosure | 6.5 | |
| High | CVE-2026-47107 | Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration | 8.1 | |
| Medium | CVE-2026-54136 | Windmill: Incorrect Authorization | — | |
| High | CVE-2026-33881 | Windmill: Code Injection | 7.2 | |
| Medium | CVE-2026-72541 | Windmill Labs Windmill - Missing Authorization | 6.5 | |
| Medium | CVE-2026-72542 | Windmill Labs Windmill - Missing Authorization | 5.4 | |
| Low | CVE-2026-26964 | Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members | 2.7 |