EUVD-2026-19748

Requires authenticated user account on Windmill CE/EE versions 1.276.0-1.603.2. Attacker injects SQL via folder ownership management 'owner' parameter to extract JWT secrets and administrative credentials, then forges admin tokens to execute arbitrary code through workflow endpoints.

This vulnerability represents critical real-world risk despite requiring low-privilege authentication. The CVSS 4.0 score of 9.4 reflects maximum impact across confidentiality, integrity, and availability for both vulnerable and subsequent systems (VC:H/VI:H/VA:H/SC:H/SI:H/SA:H). The attack complexity is low (AC:L) with no user interaction required (UI:N), making exploitation straightforward for authenticated users. Publicly available exploit code exists (Chocapikk's Windfall POC on GitHub), significantly lowering the skill barrier for exploitation. The vulnerability is not listed in CISA KEV, indicating no confirmed active exploitation at time of analysis, but the POC availability combined with the privilege escalation to RCE chain makes this highly attractive to attackers. From an SSVC perspective, this is automatable once initial low-privilege access is obtained, has total technical impact (code execution), and affects a workflow orchestration platform likely integrated into critical business processes. Organizations running Windmill in multi-tenant or shared environments face immediate risk from malicious insiders or compromised low-privilege accounts. The network attack vector (AV:N) means any authenticated user with network access can exploit this, not just local users.

An authenticated attacker with low-privilege access to a Windmill instance crafts a malicious request to the folder ownership management endpoint, injecting SQL commands through the owner parameter to extract the JWT signing secret and administrative user UUIDs from the database. Using the exfiltrated signing secret, the attacker forges a valid JWT token with administrative claims and authenticates to the platform as an administrator. With elevated privileges, the attacker accesses workflow execution endpoints to create and execute malicious workflows containing arbitrary code, achieving remote code execution on the Windmill server infrastructure with the privileges of the application service account. Publicly available exploit code exists demonstrating this complete attack chain from SQL injection to RCE.