# CVE-2026-102981: Plane workspace invitation token disclosure and hijack

Source: https://junglewise.ai/threats/cve-2026-102981-plane-is-an-open-source-project-management-tool-prior-to-1-4-0  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-102981 · Severity: medium · CVSS 6.5 · Published 2026-10-13

Plane is an open-source project management and collaboration platform. Prior to version 1.4.0, self-hosted instances allowed attackers to retrieve secret workspace invitation tokens without authentication, then accept those invitations and gain unauthorized workspace access with the role assigned to the invite. This bypasses intended access controls and could allow unauthorized project visibility and collaboration capabilities.

Technologies: [Plane](https://junglewise.ai/threats/technologies/plane-plane). Vendors: [Plane](https://junglewise.ai/threats/vendors/plane).

## Quick answers

**Is CVE-2026-102981 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-102981 being exploited in the wild.

**How severe is CVE-2026-102981?** Medium severity, with a CVSS score of 6.5, published 13 October 2026.

**Which products and versions are affected?** Plane before 1.4.0.

**Is there a fix for CVE-2026-102981?** Yes: fixed in 1.4.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-102981 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-102981?** Check whether you run Plane at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 1.4.0

## Technical details

The vulnerability consists of two authentication and authorization flaws in the workspace invitation flow: (1) WorkspaceJoinEndpoint.get() accepted unauthenticated requests and exposed the secret token via the serializer's get_invite_link method, allowing any caller with a workspace slug and invite UUID to retrieve tokens; (2) the POST acceptance handler validated only the token, not that the accepting user's email matched the invited email, allowing an attacker who registered with the target email to hijack the invite. Both issues are fixed in 1.4.0 through a public serializer that excludes sensitive fields and email verification on POST.

## Affected products

- Plane Plane before 1.4.0

## Timeline

- 2026-10-13: disclosed

## References

- [https://github.com/makeplane/plane/commit/6220ba990b2276a1a1979d1d5df68f650b8b47ad](https://github.com/makeplane/plane/commit/6220ba990b2276a1a1979d1d5df68f650b8b47ad)
- [https://github.com/makeplane/plane/pull/9297](https://github.com/makeplane/plane/pull/9297)

## Related threats

- [Plane project management missing authorization checks](https://junglewise.ai/threats/cve-2026-102985-plane-is-an-open-source-project-management-tool-in-1-3-1-and)
- [Plane order_by injection in issue-listing endpoints](https://junglewise.ai/threats/cve-2026-102988-plane-is-an-open-source-project-management-tool-prior-to-1-4-0)
- [Plane stored XSS in comments and intake descriptions](https://junglewise.ai/threats/cve-2026-102982-plane-is-an-open-source-project-management-tool-prior-to-1-4-0)
- [Plane hardcoded Django SECRET_KEY in community deployments](https://junglewise.ai/threats/cve-2026-105641-plane-is-an-open-source-project-management-tool-prior-to-1-4-0)
- [Plane workspace invitation hijacking and token disclosure](https://junglewise.ai/threats/cve-2026-105639-plane-is-an-open-source-project-management-tool-prior-to-1-4-0)