Windmill Labs has 2 CVEs on record. The median CVSS is 9.4 (critical), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.4
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Windmill Labs vulnerabilities
CVEs affecting Windmill Labs, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-22683High· 8.8PoCWindmill < 1.615.0 Operator Role Missing Authorization Checks RCE
Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are do…
▾ MidnightWindmill Labs · Windmill CE (Community Edition)EPSS 2.6%via CVEORG
CVE-2026-23696Critical· 9.9PoCWindmill < 1.603.3 File Ownership Handling SQLi RCE
Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to inject SQL through the owner parameter. An attacker can us…
▾ AbyssalWindmill Labs · Windmill CE (Community Edition)EPSS 14%via CVEORG