CVE-2026-104970 - Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins
CVE ID :CVE-2026-104970 Published : Oct. 5, 2026, 5:17 p.m. | 2 hours, 11 minutes ago Description :Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-229 uses...