windmill
v1.875.0Code-first platform for workflows, apps and AI agents, on the fastest self-hostable orchestrator (benchmarked against Airflow, Prefect and Temporal). Business teams build with AI, engineers control what ships. Open-source alternative to Lovable, Retool and n8n.
- Maintenance
- Active2314 commits in 3 months · bus factor 1
- License
- OtherUnknown
- Security
- 5 advisories2 high, 3 low
- Supported versions
- No scheduleendoflife.date does not track this project
18.6k stars · 1.2k forks · 884 open issues · last release 21 hours ago · data checked 54 minutes ago
Security advisories
All advisories on GitHubThe 5 most recent advisories published by the maintainers: 2 high, 3 low. Check the patched version against the one you run.
- highGHSA-2jfj-x8j7-7mfhSep 10, 2026Under nsjail security sandboxing, DuckDB scripts can escape the fs sandbox and poison shared worker caches for cross-workspace RCE
- Affected
- <1.782.0
- Patched in
- 1.782.0
- lowCVE-2026-54136Jun 3, 2026Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
- Affected
- <= 1.714.1
- Patched in
- 1.715.0
- lowCVE-2026-33881Mar 25, 2026Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor
- Affected
- < 1.664.0
- Patched in
- 1.664.0
- highCVE-2026-29059Mar 2, 2026SUPERADMIN_SECRET (rarely used) can be accessed publicly on versions < 1.603.3 using RCE
- Affected
- < 1.603.3
- Patched in
- 1.603.3
- lowCVE-2026-26964Feb 16, 2026Workspace Slack OAuth Client Secret Exposed to Non-Admin Workspace Members
- Affected
- <= 1.634.6
- Patched in
- >= 1.635.0