Known vulnerabilities in Windmill

Software: Windmill
Software CPE: cpe:2.3:a:windmill_labs:windmill:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windmill Windmill is affected by 4 known vulnerabilities: 1 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128315 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33881
CWE-94 Medium
No
No
1.664.0 28.04.2026 SB2026042854
#VU123518 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-29059
CWE-22 High
No
Exploited
1.603.3 04.03.2026 SB2026030425
#VU123114 - Exposure of sensitive information to an unauthorized actor
CVE-2026-26964
CWE-200 Low
Available
No
1.635.0 20.02.2026 SB2026022034
#VU96924 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-8462
CWE-307 Low
No
No
1.390.1 06.09.2024 SB2024090634