superplanehq CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH superplanehq CVE published 2026-07-28

CVE-2026-57510

CVE-2026-57510 is a high-severity vulnerability in SuperPlane before version 0.27.0, allowing authenticated users with viewer-level access to access resources across tenant boundaries. This broken object-level authorization vulnerability in the CanvasService gRPC handlers enables attackers to read cross-tenant execution history and event payloads, write queue items and canvas events, delete canvases, and [truncated]