CVE-2026-104965 Plane: Cross-Tenant Issue Relation Creation via IDOR

Plane is an open-source project management tool. Prior to 1.4.0, the issue-relation endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can create relations linking their own issues to issues in any other workspace ...

CVE-2026-104965

The project management tool Plane contains a cross-tenant issue relation creation vulnerability in versions prior to 1.4.0 . The issue-relation endpoint fails to validate that provided issue UUIDs belong to the caller's workspace, allowing an authenticated user to create relations linking their i...