Advisories · Technology
Windmill.
Every CVE that names Windmill among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Windmill Labs Windmill - Missing Authorization
- Windmill
- Authentication bypass
- CVSS 6.5 Medium
Windmill Labs Windmill - Missing Authorization
- Windmill
- Authentication bypass
- CVSS 6.5 Medium
Windmill Labs Windmill - Information Disclosure
- Windmill
- Information disclosure
- CVSS 8.6 High
Windmill < 1.703.2 Incorrect Default Permissions in nsjail Configuration
- windmill
- Broken access control
- CVSS 7.3 High
Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor
- windmill
- Code injection
- CVSS 6.9 Medium
Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly
- windmill
- Path traversal
- CVSS 2.7 Low
Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members
- windmill
- Information disclosure