# CVE-2026-85289: InvoicePlane missing CSRF token validation in delete methods

Source: https://junglewise.ai/threats/cve-2026-85289-invoiceplane-is-a-self-hosted-open-source-application-for  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-25. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85289 · Severity: medium · CVSS 6.5 · Published 2026-09-25

InvoicePlane is a self-hosted invoicing application that manages financial records and client data. Due to missing CSRF token validation on delete endpoints, an attacker can trick an authenticated administrator into deleting invoices, payments, users, and other critical business data by submitting a malicious form from a third-party website.

Technologies: [InvoicePlane](https://junglewise.ai/threats/technologies/invoiceplane). Vendors: [InvoicePlane](https://junglewise.ai/threats/vendors/invoiceplane).

## Quick answers

**Is CVE-2026-85289 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85289 being exploited in the wild.

**How severe is CVE-2026-85289?** Medium severity, with a CVSS score of 6.5, published 25 September 2026.

**Which products and versions are affected?** InvoicePlane prior to 1.7.2.

**Is there a fix for CVE-2026-85289?** A patch was published on 2026-07-18. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-85289 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-85289?** Check whether you run InvoicePlane at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

InvoicePlane delete methods (Payments::delete(), Recurring::delete(), User_clients::delete(), and others) omit CSRF token validation despite requiring POST requests, failing to call ensure_valid_post_request(). An authenticated attacker can craft cross-origin requests that execute deletions of sensitive financial records if an administrator visits a malicious webpage while logged in. The vulnerability is fixed in version 1.7.2.

## Affected products

- InvoicePlane InvoicePlane prior to 1.7.2

## Timeline

- 2026-09-25: disclosed
- 2026-07-18: patched

## References

- [https://github.com/InvoicePlane/InvoicePlane/commit/215b8c1acca7560d00b7e463fb1c6fe98235ab95](https://github.com/InvoicePlane/InvoicePlane/commit/215b8c1acca7560d00b7e463fb1c6fe98235ab95)
- [https://github.com/InvoicePlane/InvoicePlane/pull/1637](https://github.com/InvoicePlane/InvoicePlane/pull/1637)

## Related threats

- [InvoicePlane authorization bypass in guest quote operations](https://junglewise.ai/threats/cve-2026-55561-invoiceplane-is-a-self-hosted-open-source-application-for)
- [InvoicePlane missing object-level authorization in Users::form()](https://junglewise.ai/threats/cve-2026-100392-invoiceplane-is-a-self-hosted-open-source-application-for)
- [InvoicePlane authorization bypass in Users::form()](https://junglewise.ai/threats/cve-2026-100371-invoiceplane-is-a-self-hosted-open-source-application-for)
- [InvoicePlane privilege escalation via stale session validation](https://junglewise.ai/threats/cve-2026-88003-invoiceplane-is-a-self-hosted-open-source-application-for)
- [InvoicePlane stored XSS in client email field](https://junglewise.ai/threats/cve-2026-85293-invoiceplane-is-a-self-hosted-open-source-application-for)