PT-2026-41986 · Windmill · Windmill

Shai Dvash · Published 2026-05-19 · Updated 2026-05-20 · CVE-2026-47107

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Windmill versions prior to 1.703.2

Description Incorrect default permissions in nsjail sandbox configuration files allow the /etc directory to be bind-mounted without read-write restrictions. This enables authenticated users to write arbitrary entries to /etc/hosts, /etc/resolv.conf, and /etc/ssl/certs/ca-certificates.crt during script execution. Attackers can create persistent poisoned entries on worker pods to redirect hostnames, intercept DNS queries, perform transparent HTTPS man-in-the-middle attacks, and intercept WM TOKEN JWTs to obtain workspace-admin access to victim workspaces across different tenants.

Recommendations Update to version 1.703.2.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-47107

Affected Products

Windmill

References · 10

• 🔥 https://github.com/windmill-labs/windmill/pull/9194 · Exploit
• https://github.com/windmill-labs/windmill/commit/f8467f38c8a053117ce62f96684cfb15ef792f08 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-47107 · Security Note
• https://github.com/windmill-labs/windmill/releases/tag/v1.703.2 · Note
• https://twitter.com/OrizonCyber/status/2056812196227600782 · Twitter Post
• https://t.me/CVEtracker/54272 · Telegram Post
• https://vulncheck.com/advisories/windmill-incorrect-default-permissions-in-nsjail-configuration · Note
• https://reddit.com/r/pwnhub/comments/1tinr3w/windmill_users_at_risk_critical_sandbox_escape · Reddit Post
• https://twitter.com/VulmonFeeds/status/2056878613618672051 · Twitter Post
• https://twitter.com/CVEnew/status/2056870210758398185 · Twitter Post