CVE-2026-102985 | makeplane Plane up to 1.3.1 member_id improper authorization

October 14, 2026 Yanac

A vulnerability, which was classified as problematic, was found in makeplane Plane up to 1.3.1. This impacts the function ProjectMemberViewSet.partial_update/ProjectMemberPreferenceEndpoint.patch. Executing a manipulation of the argument member_id can lead to improper authorization.

This vulnerability is tracked as CVE-2026-102985. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More