Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/06 7:11 a.m.100 views

CVE-2026-29059 Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly

Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to version 1.603.3, an unauthenticated path traversal vulnerability exists in Windmill's getlogfile endpoint "/api/w/workspace/jobsu/getlogfile/filename". The filename parameter is...

6.9CVSS0.02608EPSS
SaveExploits0References2
Rows per page
Query Builder