CVE-2026-111869 | makeplane up to 1.4.2 API Endpoint X-Forwarded-For reliance on untrusted inputs in a security decision (Issue 9913)

October 17, 2026 Yanac

A vulnerability described as problematic has been identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision.

This vulnerability is referenced as CVE-2026-111869. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More