CVE-2026-23696

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-23696
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23696.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23696
Published
2026-04-07T16:50:53.231Z
Modified
2026-08-12T03:51:31.308343341Z
Severity
  • 9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator
Summary
Windmill < 1.603.3 File Ownership Handling SQLi RCE
Details

Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to inject SQL through the owner parameter. An attacker can use the injection to read sensitive data such as the JWT signing secret and administrative user identifiers, forge an administrative token, and then execute arbitrary code via the workflow execution endpoints.

Database specific 
{
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23696.json",
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/windmill-labs/windmill

Affected ranges

Type
GIT
Repo
https://github.com/windmill-labs/windmill
Events
Introduced
90a31cf25cf21968e2afd2eb57d0b80bd5129dc2
Fixed
ecb8015d6c34fb405cb34025b1a5ebafb55ac95b
Fixed
942fb629210ebb287f48467d1535ffde3a3eeafe
Fixed
de2f5d3432ab294e39167b1a2b804616fc96c814
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "1.276.0"
        },
        {
            "fixed": "1.603.2"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23696.json"