{"vulnerability": "cve-2026-29059", "sightings": [{"uuid": "e511fc3b-d858-4b64-ac76-8f96cfbf69c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgfffrkmn22w", "content": "", "creation_timestamp": "2026-03-06T13:15:07.305009Z"}, {"uuid": "45c76f47-7699-4e80-934d-a75a8a3b84d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "95b11b4e-9852-4eb5-a436-ed41b28002de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-29059.yaml", "content": "", "creation_timestamp": "2026-06-03T04:09:58.000000Z"}, {"uuid": "d3739494-4fbd-491f-a636-c1ed1e2a6618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mraidputco2l", "content": "Windmill \u306e\u8a8d\u8a3c\u4e0d\u8981\u306a\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u8aad\u307f\u53d6\u308a\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u308b\n\nWindmill CVE-2026-29059 \u306e\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u300124\u30ab\u56fd\u3067\u7d04170\u306e\u30b7\u30b9\u30c6\u30e0\u304c\u9732\u51fa\u3057\u3066\u3044\u307e\u3059\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u30b5\u30fc\u30d0\u30fc\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u3089\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-07-22T14:01:28.864355Z"}, {"uuid": "19450704-2be8-40e7-859e-3659ec92da65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mraihfkjyx2k", "content": "CVE-2026-29059 enables unauthenticated path traversal in Windmill to read arbitrary server files, potentially exposing SUPERADMIN_SECRET and enabling superadmin takeover.\n", "creation_timestamp": "2026-07-22T14:03:32.442809Z"}, {"uuid": "a8134a8d-ec97-40d0-9937-e8e5d2cf3362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mraj42e2fk2o", "content": "Windmill \u306b\u8a8d\u8a3c\u306a\u3057\u3067\u4efb\u610f\u306e\u30b5\u30fc\u30d0\u30fc\u30d5\u30a1\u30a4\u30eb\u304c\u8aad\u307f\u53d6\u3089\u308c\u308b\u8106\u5f31\u6027 (CVE-2026-29059) \u304c\u767a\u898b\u3055\u308c\u3001\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-07-22T14:15:05.442538Z"}, {"uuid": "d791d389-643f-4910-bfb6-a7645bd79d81", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/626d6582-9620-47d1-aa26-819dfa407909", "content": "", "creation_timestamp": "2026-07-22T15:00:28.183850Z"}, {"uuid": "b57e0a81-d613-4643-9c4e-2942ff4409fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mralrjzzvm2j", "content": "\ud83e\udd16 CVE-2026-29059 (CVSS 7.5): Active exploitation of path traversal in Windmill open-source platform. Unauthenticated file read via get_log_file endpoint.\nhttps://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "creation_timestamp": "2026-07-22T15:02:53.044291Z"}, {"uuid": "248f0dca-9837-4539-8f16-ddb659dac303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "content": "A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.\n\nThe vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's \"get_log_file\" endpoint (\"/api/w/{workspace}/jobs_u/get_log_file/{filename}\").\n\n\"The filename parameter is concatenated into", "creation_timestamp": "2026-07-22T16:00:46.505846Z"}, {"uuid": "9a8f33f6-fbf2-442c-b3ac-f8126ea671ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3mrau4apys62l", "content": "Windmill CVE-2026-29059 is not routine patch debt. One exposed automation server can leak files, secrets, and admin paths before defenders catch up. https://www.hexon.bot/blog/windmill-vulnerability-workflow-automation-secrets #Cybersecurity #AppSec", "creation_timestamp": "2026-07-22T17:32:02.728862Z"}, {"uuid": "8fa59994-8ef6-4dbd-8887-1a99ea00cca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mray7gebs52z", "content": "Actively exploited Windmill flaw CVE-2026-29059 lets attackers use get_log_file path traversal to read arbitrary server files without auth, including /etc/passwd and SUPERADMIN_SECRET. #Windmill #CVE202629059 #CISA", "creation_timestamp": "2026-07-22T18:45:24.615925Z"}, {"uuid": "4d92f94b-9737-4793-9ebd-c5f4dcd6690b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "content": "A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.\n\nThe vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's \"get_log_file\" endpoint (\"/api/w/{workspace}/jobs_u/get_log_file/{filename}\").\n\n\"The filename parameter is concatenated into", "creation_timestamp": "2026-07-23T01:00:40.662599Z"}, {"uuid": "d87486a5-5d41-4fc0-abbb-20911fca9d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://t.me/thehackernews/9581", "content": "Windmill servers are under active attack.\n\nExperts say attackers are exploiting CVE-2026-29059 to read arbitrary server files without logging in. On some systems, the same flaw can lead to superadmin access and code execution.\n\nFull details: https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "creation_timestamp": "2026-07-23T05:00:04.023344Z"}, {"uuid": "3f3f4f00-df3c-4874-9418-922bda395f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrc4s5vdwk2a", "content": "Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication\n\nA high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.\n\nThe vulnerability in question is CVE-2026-29059 (CVS\u2026\n#hackernews #news", "creation_timestamp": "2026-07-23T05:40:07.736949Z"}, {"uuid": "b44530ea-8f16-47eb-af81-812e1bd8246d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "Telegram/D39b8odzloEyVSPfYMfhmnBgzft4qdO2zImNqzlw4Q0WVA", "content": "", "creation_timestamp": "2026-07-23T10:00:02.719287Z"}, {"uuid": "bb7c9cb6-0ddd-40d4-887a-0487db343817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mrcpcyh5ge2r", "content": "VulnCheck says attackers are exploiting Windmill CVE-2026-29059 to read server files, with about 170 vulnerable systems exposed in 24 countries.", "creation_timestamp": "2026-07-23T11:11:40.105112Z"}, {"uuid": "bfd26d90-f4f8-4298-92ab-24629da0e4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "exploited", "source": "Telegram/D39b8odzloEyVSPfYMfhmnBgzft4qdO2zImNqzlw4Q0WVA", "content": "", "creation_timestamp": "2026-07-24T00:00:09.387494Z"}, {"uuid": "3c69b1e0-c70e-4d01-9c63-98e65369f5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "exploited", "source": "https://t.me/thehackernews/9581", "content": "Windmill servers are under active attack.\n\nExperts say attackers are exploiting CVE-2026-29059 to read arbitrary server files without logging in. On some systems, the same flaw can lead to superadmin access and code execution.\n\nFull details: https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "creation_timestamp": "2026-07-24T00:00:11.399037Z"}, {"uuid": "2e6d0f8f-78a4-4284-9b23-89fba1e4fdaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrhrrsvpcz2k", "content": "\ud83d\udd34 EXPLOITED\n\nWindmill, the open-source automation platform, has an unauthenticated flaw (CVE-2026-29059) that lets a stranger read files off the server. It is being exploited now.\n\nRun Windmill? Update to 1.603.3 and rotate exposed secrets.", "creation_timestamp": "2026-07-25T11:39:03.559948Z"}, {"uuid": "c7299fb3-0b54-4a4a-b83f-1238eb6c4810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mrizj7i2ye2c", "content": "Active exploit! CVE-2026-29059 (CVSS 7.5) affects Windmill's get_log_file endpoint via unauthenticated path traversal. Urgent patch needed to prevent compromise. #CyberSecurity", "creation_timestamp": "2026-07-25T23:30:04.467075Z"}]}