Skip to content
Noroxi

windmill records

4 published records for vendor windmill.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
50%
Median publish → KEV
No record has entered KEV

Records by year

  1. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2026-22683
    35Monitor

    Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

    HighCVSS 8.7Proof of conceptEPSS 3%

    windmill · windmillApr 7, 2026

  • CVE-2026-33881
    29Monitor

    Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor

    HighCVSS 7.3No exploitEPSS 1%

    windmill · windmillMar 27, 2026

  • CVE-2026-29059
    28Monitor

    Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly

    MediumCVSS 6.9Proof of conceptEPSS 2%

    windmill · windmillMar 6, 2026

  • CVE-2026-26964
    10Monitor

    Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members

    LowCVSS 2.7No exploitEPSS 0%

    windmill · windmillFeb 19, 2026