Skip to content
Fencer Vulns
critical 9.9

CVE-2026-23696 in the critical feed json

Windmill < 1.603.3 File Ownership Handling SQLi RCE

published 2026-04-07 7 mo ago modified 2026-11-08 25 h ago also EUVD-2026-19748

cvss
9.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
13.6%
EPSS 13.6% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known, plus a Nuclei check

Summary

Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to inject SQL through the owner parameter. An attacker can use the injection to read sensitive data such as the JWT signing secret and administrative user identifiers, forge an administrative token, and then execute arbitrary code via the workflow execution endpoints.

Patch / fix

  • Windmill Labs Windmill CE (Community Edition) 1.603.3
  • Windmill Labs Windmill EE (Enterprise Edition) 1.603.3

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
7 mo ago

Exploit prediction

13.58% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Nuclei template Windmill < 1.603.3 - SQL Injection nuclei detection template
  • chocapikk.com https://chocapikk.com/posts/2026/windfall-nextcloud-flow-windmill-rce/ referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/Chocapikk/Windfall referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 4.0 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CNA 3.1 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CNA 4.0 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Windmill Labs Windmill CE (Community Edition)
  • Windmill Labs Windmill EE (Enterprise Edition)

Classification

Weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.