CVE-2026-105639 - Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane
CVE ID :CVE-2026-105639 Published : Oct. 5, 2026, 6:10 p.m. | 1 hour, 17 minutes ago Description :Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email...