Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. A vulnerability in Windmill versions prior to 1.715.0 allows a resource-scoped API token to read script contents outside its allowed path scope through GET /api/w/{workspace}/scripts/list_search. The route-level scope middleware validated the token domain and action but did not enforce the resource/p [truncated]
CVE-2026-47107 describes an incorrect default-permissions issue in Windmill's nsjail sandbox configuration. In affected versions before 1.703.2, /etc is bind-mounted without read-write restrictions, allowing authenticated users to alter files such as /etc/hosts, /etc/resolv.conf, and /etc/ssl/certs/ca-certificates.crt from within script execution sandboxes. Because those changes can persist across later e [truncated]
CVE-2026-23696 is a critical SQL injection vulnerability in Windmill CE and EE versions 1.276.0 through 1.603.2. The vulnerability is located in the folder ownership management functionality and allows authenticated attackers to inject SQL through the owner parameter. This type of vulnerability typically allows attackers to read sensitive data, execute arbitrary code, or elevate privileges. Administrators [truncated]
