WI
Vendor
Windmill
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-22683 | WI Windmill Windmill | 8.8 | Apr 7 | Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE |
| CVE-2026-33881 | WI Windmill Windmill | 7.2 | Mar 27 | Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor |
| CVE-2026-29059 | WI Windmill Windmill | 7.5 | Mar 6 | Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly |
| CVE-2026-26964 | WI Windmill Windmill | 2.7 | Feb 20 | Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs |