WL
Vendor security profile
Windmill Labs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%25
Avg. CVSS5.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
0
0
CVE KEV
CVE severity distribution
4toplam CVE
Medium4 (100%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
5.1
CVE-2026-54136
Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
WL
Patch verifiedEPSS %0
5.4
CVE-2026-72542
Windmill Labs Windmill - Missing Authorization
WL
Patch status unknownEPSS %0
6.5
CVE-2026-72541
Windmill Labs Windmill - Missing Authorization
WL
Patch status unknownEPSS %0
6.5
CVE-2026-72539
Windmill Labs Windmill - Information Disclosure
WL
Patch status unknownEPSS %0