Windmill vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WI

Product

Windmill

by Windmill · last CVE Apr 7, 2026

4

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities4 In the news1 Timeline

Severity mix

Critical 0High 3Medium 0Low 1

Severity

All severities4 Critical0 High3 Medium0 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Windmill to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-22683	8.8	3%	Apr 7	Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE Affected: 1.56.0 through 1.614.0
CVE-2026-29059	7.5	3%	Mar 6	Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs Affected: before 1.603.3
CVE-2026-33881	7.2	0%	Mar 27	Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor Affected: before 1.664.0
CVE-2026-26964	2.7	0%	Feb 20	Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs Affected: before 1.635.0