WI
Product
windmill
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch
Add windmill to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47107 | 8.1 | May 19 | Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration Affected: before 1.703.2 |
| CVE-2026-29059 | 7.5 | Mar 6 | Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly Affected: < 1.603.3 |
| CVE-2026-33881 | 7.2 | Mar 27 | Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor Affected: < 1.664.0 |
Showing 3