Open-Source Project Management Tool Vulnerability in Plane by MakePlane
CVE-2026-104894

4.3MEDIUM

Key Information:

Vendor: Makeplane
Status: Plane
Vendor: CVE Published:; 5 October 2026

What is CVE-2026-104894?

The Plane project management tool, prior to version 1.4.0, has a vulnerability where the modules endpoint accepts issue UUIDs in the URL path without proper validation. This inadequacy allows an authenticated user to link issues from any workspace to modules in their own workspace, potentially compromising project integrity. Users are advised to update to version 1.4.0 or later to mitigate this risk.