CVE-2026-47107 Details

A vulnerability exists in Windmill versions prior to 1.703.2, where nsjail sandbox configuration files incorrectly allow default permissions. The /etc directory is bind-mounted without proper read-write restrictions, enabling authenticated users to write arbitrary entries to critical system files such as /etc/hosts, /etc/resolv.conf, and /etc/ssl/certs/ca-certificates.crt, all from within script execution sandboxes. This flaw can be exploited to create persistent, malicious entries that affect all subsequent script executions on the same worker pod. Such exploitation can redirect hostnames, intercept DNS queries, conduct transparent HTTPS man-in-the-middle attacks, and capture WM_TOKEN JWTs, granting workspace-admin access to victim workspaces across tenants.

Users can update to Windmill version 1.703.2 or later, where this vulnerability has been fixed.