CVE-2026-102985

The open-source project management tool Plane versions 1.3.1 and earlier is vulnerable to missing object-level authorization checks. Specifically, the ProjectMemberViewSet.partial_update function places authorization checks only within the role update branch, allowing a guest or member to modify ...