CVE-2026-102986 | makeplane Plane up to 1.3.x Asset Endpoint {anchor} EntityAssetEndpoint authorization

October 14, 2026 Yanac

A vulnerability has been found in makeplane Plane up to 1.3.x and classified as problematic. Affected is the function EntityAssetEndpoint of the file /api/public/assets/v2/anchor/{anchor} of the component Asset Endpoint. The manipulation leads to missing authorization.

This vulnerability is listed as CVE-2026-102986. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More