Skip to content
OpenAdvisories

Vendor

superplanehq

2 known vulnerabilities.

Products

superplane 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-57510

    SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

    SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticated users with viewer-level access to one organization to access resources belonging to other organizations by supplyi…

    superplanehq superplane