CVE-2026-27949— Plane Exposes User Email (PII and part of credential) in GET Parameter
Quick assessment
Affected
makeplane plane
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Plane是Plane开源的一个开源、自托管的项目规划工具。 Plane 1.3.0之前版本存在安全漏洞，该漏洞源于身份验证流程中将用户电子邮件地址作为查询参数传输，可能导致个人信息泄露。
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-27949
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Plane Exposes User Email (PII and part of credential) in GET Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentication flow where a user's email address is included as a query parameter in the URL during error handling (e.g., when an invalid magic code is submitted). Transmitting personally identifiable information (PII) via GET request query strings is classified as an insecure design practice. The affected code path is located in the authentication utility module (packages/utils/src/auth.ts). This vulnerability is fixed in 1.3.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Plane 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Plane是Plane开源的一个开源、自托管的项目规划工具。 Plane 1.3.0之前版本存在安全漏洞，该漏洞源于身份验证流程中将用户电子邮件地址作为查询参数传输，可能导致个人信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-27949
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-27949
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: plane
-
CVE-2026-86174
Plane through 1.4.2 Arbitrary Comment Write via Public Deplo -
CVE-2026-15342
CVE-2026-15342 -
CVE-2026-10850
Plane 1.3.1 - Stored XSS in intake issue description_html -
CVE-2026-46558
Plane: Cross-workspace asset authorization bypass lets any a -
CVE-2026-40102
Plane: ORM Field Reference Injection via `segment` Parameter
Same vendor: makeplane
-
CVE-2026-86174
Plane through 1.4.2 Arbitrary Comment Write via Public Deplo -
CVE-2026-46558
Plane: Cross-workspace asset authorization bypass lets any a -
CVE-2026-40102
Plane: ORM Field Reference Injection via `segment` Parameter -
CVE-2026-39843
Plane has a Server-Side Request Forgery (SSRF) in Favicon Fe -
CVE-2026-39374
Plane IDOR: Cross-Project Issue Date Modification via Bulk U
Same weakness: CWE-200
-
CVE-2026-105098
Omega Solution CoinEx Crypto Support Ticket API customer inf -
CVE-2026-105120
OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sess -
CVE-2026-71883
Native AES packet cipher returns the raw AES key on an alias -
CVE-2026-100149
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share -
CVE-2026-105030
Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via
V. Comments for CVE-2026-27949
No comments yet