<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: windmill</title><description>Every new CVE for windmill.</description><link>https://agentprime.io/</link><item><title>CVE-2026-72542: Windmill Labs Windmill - Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2026-72542/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-72542/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 11:08:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-72541: Windmill Labs Windmill - Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2026-72541/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-72541/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 11:08:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-72539: Windmill Labs Windmill - Information Disclosure</title><link>https://agentprime.io/advisories/CVE-2026-72539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-72539/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 11:07:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47107: Windmill &lt; 1.703.2 Incorrect Default Permissions in nsjail Configuration</title><link>https://agentprime.io/advisories/CVE-2026-47107/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47107/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 16:42:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33881: Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor</title><link>https://agentprime.io/advisories/CVE-2026-33881/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33881/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Mar 2026 20:34:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-29059: Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly</title><link>https://agentprime.io/advisories/CVE-2026-29059/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-29059/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 07:11:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-26964: Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members</title><link>https://agentprime.io/advisories/CVE-2026-26964/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26964/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Feb 2026 23:57:30 GMT</pubDate><category>CVE</category></item></channel></rss>