Windmill vulnerabilities
Products
- Windmill 4
Newest
- nextcloud flow, windmill, windmill labs ce (community edition) +1 more +3 more Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE 8.7 High
- windmill Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor 7.3 High
- windmill Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly 6.9 Medium
- windmill Windmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members 2.7 Low