CVE-2026-104969

Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0

Description An authenticated user can perform a destructive cross-tenant write by adding issues from any workspace to a cycle they control. This occurs because the 'cycle-issues' endpoint accepts issue UUIDs in the request body without validating if they belong to the caller's workspace. If a target issue is already assigned to another cycle, it is removed from that cycle during the operation.

Recommendations Update to version 1.4.0.