EUVD-2026-92597

Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRETKEY and LIVESERVERSECRETKEY defaults that remain active when operators do not override them. The top-level setup.sh randomiz...

PT-2026-106088

Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description Manifests in deployments/aio/community/ and deployments/cli/community/ use fixed, publicly known default values for SECRET KEY and LIVE SERVER SECRET KEY that remain active if not overridden. While the...