Tag: windmill
1 article
Hackers Exploit Windmill Flaw to Read Server Files Without Authentication
A critical security flaw in Windmill, tracked as CVE-2026-29059, has left around 170 instances across 24 countries vulnerable to hackers who can exploit it to read server files without needing login credentials. This bug, which was fixed in January 2026, allows attackers to access arbitrary files using a simple manipulation of file paths.