CVE-2026-105636 | Makeplane Plane up to 1.3.x Webhook Delivery Task webhook_task.py requests.post server-side request forgery

October 5, 2026 Yanac

A vulnerability classified as critical has been found in Makeplane Plane up to 1.3.x. This vulnerability affects the function requests.post of the file apps/api/plane/bgtasks/webhook_task.py of the component Webhook Delivery Task. This manipulation causes server-side request forgery.

This vulnerability appears as CVE-2026-105636. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More