CVE-2026-104977

Summary

The flaw is an incomplete Server-Side Request Forgery (SSRF) vulnerability in Plane's work-item link unfurling feature, where authenticated users can make the server fetch data from internal targets like cloud metadata services. This allows attackers to access sensitive internal resources that should be protected from external access.

Exploitability

Exploitation is relatively straightforward for authenticated project members who can trigger link unfurling, requiring only basic web interaction with a crafted URL to initiate SSRF requests against internal targets.

Blast radius

The impact could be significant as attackers can access cloud metadata services and potentially extract sensitive credentials or configuration data from internal infrastructure that's normally isolated from external networks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.4.0 which contains the complete fix for this SSRF vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.