TI-2026-70690 CVE-2026-108711 · GHSA-xj43-ppg4-ghf5
Incorrect authorization in Plastic Labs Honcho exposes workspace data
Priority LOW 24
Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped API key holders to read workspace data because get_or_create_workspace checks only the workspace cla…