CVE-2026-46558
Missing authorization in Plane
CVSS score
8.3
EPSS probability
%0.3
Risk score
0.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Plane’s V2 asset subsystem trusted workspace slugs and asset UUIDs without enforcing the right membership checks, which let one authenticated user read, copy, delete, and overwrite assets in other workspaces. (★0)
Makefile Go / Python
https://github.com/makeplane/plane/security/advisories/GHSA-qw87-v5w3-6vxx
Makefile Go / Python
Similar Vulnerabilities
6.5
CVE-2026-40102Vulnerability in Plane
Patch status unknown Public Exploits:1EPSS %0
7.7
CVE-2026-39843Server-side request forgery in Plane
Patch status unknown Public Exploits:1EPSS %0
7.7
CVE-2026-39374Vulnerability in Plane
Patch status unknown Public Exploits:1EPSS %0
4.3
4.3
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-46558"