Skip to content
OpenAdvisories

Product · windmill-labs

Windmill CE (Community Edition)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-22683 Scanner template

    Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

    Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are documented and priced as…

    windmill-labs Windmill EE (Enterprise Edition) Windmill CE (Community Edition)