nextcloud flow vulnerabilities (CVE)

CVE records published for nextcloud flow, newest first. Follow to get an email when a new one appears.

1 results

8.8High

CVE-2026-22683 7 months ago

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

Windmill Labs Windmill CE (Community Edition); Windmill Labs Windmill EE (Enterprise Edition)

Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are documented and priced as…

2.6%EPSS