Filtered by vendor Tale Subscriptions
Filtered by product Headplane Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-46484 1 Tale 1 Headplane 2026-06-09 8.1 High
Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.