CVEFinder.io

CVE-2026-27705

đŸ”ļ medium
🔍 Scan for this CVE
Summary

Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in `apps/api/plane/app/views/asset/v2.py` (lines 579–593) performs a global asset lookup using only the asset ID (`pk`) via `FileAsset.objects.get(id=pk)`, without verifying that the asset belongs to the workspace and project specified in the URL path. This allows any authenticated user (including those with the GUEST role) to modify the `attributes` and `is_uploaded` status of a

Description

Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in `apps/api/plane/app/views/asset/v2.py` (lines 579–593) performs a global asset lookup using only the asset ID (`pk`) via `FileAsset.objects.get(id=pk)`, without verifying that the asset belongs to the workspace and project specified in the URL path. This allows any authenticated user (including those with the GUEST role) to modify the `attributes` and `is_uploaded` status of assets belonging to any workspace or project in the entire Plane instance by guessing or enumerating asset UUIDs. Version 1.2.2 fixes the issue.

CVSS Score
6.5
Medium
EPSS Score
0.0
Exploit Probability
Published Date
2026-02-25
First Seen: 2026-02-26
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 47.8% of all 329,778 vulnerabilities in our database.

#172,206
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Feb 25, 2026
🔍 Exploitation Status
None
No known exploits
⚙ī¸ Automatable
YES
Can be exploited automatically
đŸ’Ĩ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-02-27
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-639

đŸ“Ļ Affected Products 1

Vendor Product Status Affected Versions
plane plane Affected
< 1.2.2

🔗 References 3

https://github.com/makeplane/plane/commit/9070acbbe8...
Patch
https://github.com/makeplane/plane/releases/tag/v1.2.2
Product Release Notes
https://github.com/makeplane/plane/security/advisori...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-10850 đŸ”ļ medium 5.4 0.2 Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when cre... 2026-06-17
CVE-2026-46558 ⚠ī¸ high 8.3 0.2 Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization ... 2026-06-10
CVE-2026-40102 đŸ”ļ medium 6.5 0.0 Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-cont... 2026-05-20
CVE-2026-39843 ⚠ī¸ high 7.7 0.0 Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of GHSA-jcc6-f9v6-f7jw ... 2026-04-09
CVE-2026-27949 ℹī¸ low 2.0 0.0 Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentica... 2026-04-07
CVE-2026-30242 ⚠ī¸ high 8.5 0.0 Plane is an an open-source project management tool. Prior to version 1.2.3, the webhook URL validation in plane/app/seri... 2026-03-06
These CVEs affect the same products