Vendors / Windmill Labs Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Windmill Labs records in CISA KEV No Windmill Labs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.02609 · Published 2026-04-07 · Fixed in 1.615.0 CWE-862
Priority HIGH 70
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.03053 · Published 2026-03-06 · Fixed in 1.603.3 CWE-22
Priority HIGH 67
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.
CVSS 4.0 HIGH 7.3· Network · High privileges · No interaction · EPSS 0.00393 · Published 2026-03-27 · Fixed in 1.664.0 CWE-94
Priority LOW 14
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.
CVSS 3.1 LOW 2.7· Network · High privileges · No interaction · EPSS 0.00318 · Published 2026-02-19 · Fixed in 1.635.0 CWE-200
Open these records in search → All records by CVSS severity
1 3 5 1 0
