SQL Injection Vulnerability in Windmill CE and EE by Windmill Labs
CVE-2026-23696

9.4CRITICAL

Key Information:

Vendor: Windmill Labs
Status: Windmill Ce (community Edition); Windmill Ee (enterprise Edition); Flow
Vendor: CVE Published:; 7 April 2026

🔔 Create Windmill Labs Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-23696?

Versions 1.276.0 through 1.603.2 of Windmill CE and EE have a security flaw in the folder ownership management feature that enables authenticated attackers to exploit SQL through the owner parameter. This vulnerability can lead to the unauthorized reading of sensitive data, including JWT signing secrets and administrative user identifiers. Additionally, attackers may forge administrative tokens and execute arbitrary code using the workflow execution endpoints, thereby posing a significant risk to system integrity and security.

Affected Version(s)

Flow 1.0.0 <= 1.2.2

Windmill CE (Community Edition) 1.276.0 <= 1.603.2

Windmill EE (Enterprise Edition) 1.276.0 <= 1.603.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-23696 - Proof of Concept