CVE-2026-105641 - Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass
CVE ID :CVE-2026-105641 Published : Oct. 5, 2026, 6:12 p.m. | 1 hour, 15 minutes ago Description :Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY and...