{"uuid": "4d92f94b-9737-4793-9ebd-c5f4dcd6690b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29059", "type": "seen", "source": "https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html", "content": "A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.\n\nThe vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's \"get_log_file\" endpoint (\"/api/w/{workspace}/jobs_u/get_log_file/{filename}\").\n\n\"The filename parameter is concatenated into", "creation_timestamp": "2026-07-23T01:00:40.662599Z"}