CVE-2026-54136

MEDIUM SEVERITY

Vulnerability Description

Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search

Published Date

July 10, 2026

Last Modified

July 10, 2026

Source

GitHub

Vendor

rust

Product

windmill-api