Cybersecurity

Windmill vulnerability exploited to read server files without auth

Hackers are actively exploiting a Windmill path‑traversal flaw (CVE‑2026‑29059) to read arbitrary files, exposing SUPERADMIN_SECRET and prompting urgent patches.