CVE-2026-57510: Authorization Bypass Through User-Controlled Key in superplanehq superplane
SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplying arbitrary canvas or queue UUIDs without organization scoping. Attackers can read cross-tenant execution history and event payloads containing sensitive secrets, write queue items and canvas events into victim organizations, delete arbitrary canvases, and disrupt automation workflows across tenant boundaries.
AI Analysis
Technical Summary
CVE-2026-57510 is an authorization bypass vulnerability in SuperPlane prior to version 0.27.0. The vulnerability exists in the CanvasService gRPC handlers, where object-level authorization checks are insufficient. Authenticated users with viewer-level access to one organization can supply arbitrary canvas or queue UUIDs to access resources belonging to other organizations without proper scoping. This allows attackers to read sensitive cross-tenant data, write unauthorized queue items and events, delete canvases, and disrupt workflows across tenant boundaries. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity.
Potential Impact
An attacker with viewer-level access in one organization can bypass authorization controls to access and manipulate resources in other organizations. This includes reading sensitive execution history and event payloads containing secrets, writing unauthorized queue items and canvas events, deleting canvases, and disrupting automation workflows. The impact affects confidentiality, integrity, and availability across tenant boundaries.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch is currently documented. Until a patch is available, restrict viewer-level access carefully and monitor for suspicious activity related to cross-organization resource access. Follow vendor advisories for updates on remediation.
CVE-2026-57510: Authorization Bypass Through User-Controlled Key in superplanehq superplane
Description
SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplying arbitrary canvas or queue UUIDs without organization scoping. Attackers can read cross-tenant execution history and event payloads containing sensitive secrets, write queue items and canvas events into victim organizations, delete arbitrary canvases, and disrupt automation workflows across tenant boundaries.
CVSS v4.0
Score 8.7high
Affected software
superplanehq
superplane
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-57510 is an authorization bypass vulnerability in SuperPlane prior to version 0.27.0. The vulnerability exists in the CanvasService gRPC handlers, where object-level authorization checks are insufficient. Authenticated users with viewer-level access to one organization can supply arbitrary canvas or queue UUIDs to access resources belonging to other organizations without proper scoping. This allows attackers to read sensitive cross-tenant data, write unauthorized queue items and events, delete canvases, and disrupt workflows across tenant boundaries. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity.
Potential Impact
An attacker with viewer-level access in one organization can bypass authorization controls to access and manipulate resources in other organizations. This includes reading sensitive execution history and event payloads containing secrets, writing unauthorized queue items and canvas events, deleting canvases, and disrupting automation workflows. The impact affects confidentiality, integrity, and availability across tenant boundaries.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch is currently documented. Until a patch is available, restrict viewer-level access carefully and monitor for suspicious activity related to cross-organization resource access. Follow vendor advisories for updates on remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-06-24T15:58:58.536Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a6905029c2644c7f81a8626
Added to database: 07/28/2026, 19:37:38 UTC
Last enriched: 07/29/2026, 14:39:00 UTC
Last updated: 09/10/2026, 21:23:22 UTC
Views: 75
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.