CVE-2026-105637 | makeplane Plane up to 1.3.x Asset Management v2.py ProjectBulkAssetEndpoint.post privileges management

October 5, 2026 Yanac

A vulnerability was found in makeplane Plane up to 1.3.x. It has been rated as critical. This affects the function ProjectBulkAssetEndpoint.post of the file apps/api/plane/app/views/asset/v2.py of the component Asset Management. This manipulation causes improper privilege management.

This vulnerability is tracked as CVE-2026-105637. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More