Skip to content
OpenAdvisories

Product · windmill-labs

windmill

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2026-26964

    Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members

    Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6 and below allow non-admin users to obtain Slack OAuth client secrets, which should only be accessible to workspace administrators. The …

    windmill-labs windmill