CVE-2026-22683 | Windmill Community Edition/Enterprise Edition up to 1.614.0 Backend API raw_apps authorization

A vulnerability described as critical has been identified in Windmill Community Edition and Enterprise Edition up to 1.614.0. This affects the function raw_apps of the component Backend API. The manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-22683. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.