CVE-2026-102986 - Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/
CVE ID :CVE-2026-102986 Published : Oct. 14, 2026, 8:17 p.m. | 1 hour, 15 minutes ago Description :Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for...