CVE-2026-57510

creationtimestamp| type| source ---|---|--- 2026-07-28 23:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjsueq3f2x 2026-07-29 12:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrwmcj6tp2y...

CVE-2026-57510

SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplying arbitrary canvas or queue UUIDs...