Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal

Windmill 1.603.3 contains a path traversal caused by unsanitized filename parameter in getlogfile endpoint, letting unauthenticated attackers read arbitrary files on the server, exploit requires no authentication. id: CVE-2026-29059 info: name: Windmill/Nextcloud Flow 1.603.3 - Unauthenticated Pa...

GHSA-XX3C-QF5G-HC39 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45068 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45070 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QPMX-3RFJ-7RHV vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X6G4-FWCC-JJ8W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-46644 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-VQC8-7275-Q272 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45067 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45071 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-72XP-P242-47P9 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45065 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-2XF4-CG6J-VHGQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45065 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45067 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45068 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X6G4-FWCC-JJ8W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45071 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-XX3C-QF5G-HC39 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QPMX-3RFJ-7RHV vulnerabilities

Vulnerabilities for packages: nextcloud-server...