CVE-2026-104966 - Plane: Cross-Workspace IDOR in Estimate and Comment Endpoints Allows Read, Modify, and Inject Across Workspaces
CVE ID :CVE-2026-104966 Published : Oct. 5, 2026, 5:17 p.m. | 2 hours, 11 minutes ago Description :Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in the URL. An...