CVE-2026-102981 | makeplane Plane up to 1.3.x WorkSpaceMemberInviteSerializer WorkspaceJoinEndpoint slug/pk access control

October 13, 2026 Yanac

A vulnerability has been found in makeplane Plane up to 1.3.x and classified as critical. Impacted is the function WorkspaceJoinEndpoint of the component WorkSpaceMemberInviteSerializer. This manipulation of the argument slug/pk causes improper access controls.

This vulnerability appears as CVE-2026-102981. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More