Description
Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents outside its allowed path scope through GET /api/w/{workspace}/scripts/list_search. The route-level scope middleware validated the token domain and action but did not enforce the resource/path segment, and the list_search_scripts handler had no additional check_scopes call or per-row filtering before returning script path and content fields. A token such as scripts:read:f/allowed/* could therefore receive source code for unrelated paths in the same workspace, potentially disclosing internal automation logic, integration details, business logic, inline configuration, or hardcoded secrets and credentials. Exploitation required possession of a valid scoped API token for the workspace but did not require administrator privileges. This issue is fixed in version 1.715.0.
Published: 2026-08-20
Score: 5.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A resource‑scoped API token that was permitted to read scripts could, by using the endpoint /api/w/{workspace}/scripts/list_search, obtain the source code of scripts located outside the token’s authorized path. The route‑level middleware verified only the token’s domain and action, but not the specific resource or path segment. Consequently, a token such as scripts:read:f/allowed/* could retrieve the contents of unrelated scripts within the same workspace. The flaw exposes internal automation logic, integration details, business logic, configuration information, and potentially hard‑coded secrets to anyone with a valid, non‑administrative token.

Affected Systems

The vulnerability affects Windmill platform versions prior to 1.715.0 released by windmill‑labs. Any installation of windmill-labs:windmill that has not applied the 1.715.0 update is subject to attack.

Risk and Exploitability

The flaw has a CVSS score of 5.1, indicating moderate severity. EPSS information is not available, and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires possession of a valid, workspace‑scoped API token that includes a scripts:read action but does not need administrator privileges. An attacker can collect multiple script files through repeated GET requests, potentially exposing sensitive source code and secrets. While the attack vector is API‑based and does not involve local privilege escalation, the impact is the disclosure of confidential automation logic and configuration. The risk is moderate, and timely patching is strongly advised.

Generated by OpenCVE AI on August 20, 2026 at 20:01 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Windmill platform to version 1.715.0 or newer, which removes the missing path‑level check.
  • Audit existing resource‑scoped API tokens and reduce their scripts:read scopes to only necessary path segments, following the principle of least privilege.
  • Apply organizational controls to limit network access to the /api/w/{workspace}/scripts/list_search endpoint, ensuring that only trusted administrative hosts can send requests with the affected tokens.

Generated by OpenCVE AI on August 20, 2026 at 20:01 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-2ppx-66jv-wpw5 Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
History

Fri, 21 Aug 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Windmill-labs
Windmill-labs windmill
Vendors & Products Windmill-labs
Windmill-labs windmill

Thu, 20 Aug 2026 17:15:00 +0000

Type Values Removed Values Added
Description Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents outside its allowed path scope through GET /api/w/{workspace}/scripts/list_search. The route-level scope middleware validated the token domain and action but did not enforce the resource/path segment, and the list_search_scripts handler had no additional check_scopes call or per-row filtering before returning script path and content fields. A token such as scripts:read:f/allowed/* could therefore receive source code for unrelated paths in the same workspace, potentially disclosing internal automation logic, integration details, business logic, inline configuration, or hardcoded secrets and credentials. Exploitation required possession of a valid scoped API token for the workspace but did not require administrator privileges. This issue is fixed in version 1.715.0.
Title Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
Weaknesses CWE-863
References
Metrics cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Windmill-labs Windmill
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-21T21:47:02.821Z

Reserved: 2026-06-11T21:15:33.870Z

Link: CVE-2026-54136

cve-icon Vulnrichment

Updated: 2026-08-21T20:58:50.624Z

cve-icon NVD

Status : Received

Published: 2026-08-20T17:18:17.737

Modified: 2026-08-21T22:16:40.313

Link: CVE-2026-54136

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T20:15:04Z

Weaknesses