Is CVE-2026-23696 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-23696 being exploited in the wild.

How severe is CVE-2026-23696?

Critical severity, with a CVSS score of 9.9, published 7 April 2026.

Which products and versions are affected?

Nextcloud Flow 1.0.0 - 1.2.2; Windmill Labs Windmill CE 1.276.0 - 1.603.2; Windmill Labs Windmill EE 1.276.0 - 1.603.2.

Is there a fix for CVE-2026-23696?

A patch was published on 2026-04-07: Windmill v1.603.3 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-23696 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-23696?

Check whether you run Nextcloud Flow, Windmill Labs Windmill CE or Windmill Labs Windmill EE at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-23696: Windmill Labs Windmill SQL injection in folder ownership management

CVE-2026-23696 · Severity: critical · CVSS 9.9 · Published 2026-04-07

Windmill is an automation platform used to run scripts and workflows, often integrated into other services like Nextcloud. A security flaw in how it manages folder ownership allows an authorized user to perform unauthorized database queries. By exploiting this, an attacker can steal secret keys used for authentication, impersonate an administrator, and ultimately take full control of the server to execute malicious code.

Vendors: Nextcloud, Windmill Labs.

Quick answers

Is CVE-2026-23696 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-23696 being exploited in the wild.
How severe is CVE-2026-23696?: Critical severity, with a CVSS score of 9.9, published 7 April 2026.
Which products and versions are affected?: Nextcloud Flow 1.0.0 - 1.2.2; Windmill Labs Windmill CE 1.276.0 - 1.603.2; Windmill Labs Windmill EE 1.276.0 - 1.603.2.
Is there a fix for CVE-2026-23696?: A patch was published on 2026-04-07: Windmill v1.603.3 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-23696 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-23696?: Check whether you run Nextcloud Flow, Windmill Labs Windmill CE or Windmill Labs Windmill EE at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An SQL injection vulnerability exists in Windmill's folder ownership management functionality due to improper neutralization of the 'owner' parameter. Authenticated attackers can exploit this flaw to perform unauthorized database queries, enabling the extraction of sensitive information such as JWT signing secrets and administrative user IDs. With these secrets, an attacker can forge administrative tokens to bypass authentication and access workflow execution endpoints. This leads to Remote Code Execution (RCE) by executing arbitrary scripts within the workflow engine. The vulnerability affects Windmill versions 1.276.0 through 1.603.2 and Nextcloud Flow versions 1.0.0 through 1.2.2. Patches are available in Windmill v1.603.3 and Nextcloud Flow v1.3.0.

Affected products

Windmill Labs Windmill CE (Community Edition) 1.276.0 - 1.603.2
Windmill Labs Windmill EE (Enterprise Edition) 1.276.0 - 1.603.2
Nextcloud Nextcloud Flow 1.0.0 - 1.2.2

Timeline

2026-04-06: disclosed: Initial researcher blog post published
2026-04-07: advisory: CVE-2026-23696 published
2026-04-07: patched: Windmill v1.603.3 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.