windmill_ce_community_edition vulnerabilities
CVEs whose affected-version data names the windmill_ce_community_edition package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-22683High· 8.8PoCWindmill < 1.615.0 Operator Role Missing Authorization Checks RCE
Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are do…
▾ MidnightWindmill Labs · Windmill CE (Community Edition)EPSS 2.6%via CVEORG
CVE-2026-23696Critical· 9.9PoCWindmill < 1.603.3 File Ownership Handling SQLi RCE
Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to inject SQL through the owner parameter. An attacker can us…
▾ AbyssalWindmill Labs · Windmill CE (Community Edition)EPSS 14%via CVEORG