CVE-2026-105629 | makeplane Plane up to 1.3.x BulkEstimatePointEndpoint.destroy uuid authorization

October 5, 2026 Yanac

A vulnerability described as problematic has been identified in makeplane Plane up to 1.3.x. The impacted element is the function BulkEstimatePointEndpoint.destroy. Such manipulation of the argument uuid leads to authorization bypass.

This vulnerability is traded as CVE-2026-105629. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More