CVE-2026-104892 | makeplane Plane up to 1.3.9 API Token Logging Middleware aPITokenLogMiddleware missing encryption

October 5, 2026 Yanac

A vulnerability was found in makeplane Plane up to 1.3.9. It has been classified as problematic. This affects the function aPITokenLogMiddleware of the component API Token Logging Middleware. This manipulation causes missing encryption of sensitive data.

This vulnerability is registered as CVE-2026-104892. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More