CVE-2026-46558

Published June 10th, 2026

View on NVD ↗

CVSS v3

8.3

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization bypass lets any authenticated user read, copy, delete, and overwrite assets in other Plane workspaces. This issue has been patched in version 1.3.1.

makeplane/plane

🔥🔥🔥 Open-source Jira, Linear, Monday, and ClickUp alternative. Plane is a modern project management platform to manage tasks, sprints, docs, and triage.

GitHub

50.7K