Flow vulnerabilities

1 known vulnerability in Flow from Nextcloud. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Windmill CE (Community Edition): Missing Authorization

  CVE-2026-22683Apr 7, 2026Windmill LabsEPSS 2.61%

  Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modification actions via the backend API. Although Operators are documented and priced as