CVE-2026-105635 | makeplane Plane up to 1.3.x {pk} ProjectJoinEndpoint email permission

October 5, 2026 Yanac

A vulnerability, which was classified as critical, was found in makeplane Plane up to 1.3.x. This vulnerability affects the function ProjectJoinEndpoint of the file /api/workspaces/{slug}/projects/{project_id}/join/{pk}/. Such manipulation of the argument email leads to permission issues.

This vulnerability is uniquely identified as CVE-2026-105635. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More