Skip to content
OpenAdvisories

Vendor

windmill-labs

10 known vulnerabilities.

Products

windmill 8 Windmill CE (Community Edition) 2 Windmill EE (Enterprise Edition) 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-29059 Public exploit

    Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly

    Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path traversal vulnerability exists in Windmill's get_log_file endpoint "(/api/w/{workspace}/jobs_u/get_log…

    windmill-labs windmill