CVE-2026-105629: CWE-639: Authorization Bypass Through User-Controlled Key in makeplane plane
Description
CVE-2026-105629 is an authorization bypass vulnerability in the open-source project management tool Plane prior to version 1.4.0. It allows an administrator or workspace member to delete estimate points belonging to other workspaces by supplying the target UUID in a URL under their own workspace. This issue is a cross-tenant Insecure Direct Object Reference (IDOR) and is fixed in version 1.4.0.
CVSS v3.1
Score 7.1high
Affected software
makeplane
plane
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Plane versions prior to 1.4.0 contain an authorization bypass vulnerability (CWE-639) in the BulkEstimatePointEndpoint.destroy function. The endpoint resolves estimate points using a bare primary-key lookup without scoping by workspace, project, or estimate. This allows an attacker with administrator or member privileges in one workspace to permanently delete estimate points in other workspaces by providing the UUID of the target estimate point in a URL. This cross-tenant IDOR vulnerability is addressed in Plane version 1.4.0.
Potential Impact
An attacker with privileges in one workspace can permanently delete estimate points in other workspaces, causing integrity and availability impacts to project data. The vulnerability does not affect confidentiality but can lead to destructive data loss across tenants.
Mitigation Recommendations
This vulnerability is fixed in Plane version 1.4.0. Users should upgrade to version 1.4.0 or later to remediate this issue. No additional mitigation is indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-05T16:40:39.611Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac3e69c2cdf04f65628b473
Added to database: 10/05/2026, 18:04:12 UTC
Last enriched: 10/05/2026, 18:19:30 UTC
Last updated: 10/05/2026, 18:56:34 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.