[bug]: Plane data dir + files are world readable (755)
Open
@vihar is already working on this.
Since May 13, 2026.
🐛bug
plane
- Dominant language
- TypeScript
- Stars
- 59.6k
- Forks
- 5.8k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 49
Description
Is there an existing issue for this?
- I have searched the existing issues
Current behavior
As a regular user running on the machine (or a different service), I can read all plane configs/secrets.
Steps to reproduce
$ id -g
1000
$ cat /opt/plane/plane.env | grep REDIS
# REDIS SETTINGS
REDIS_HOST=plane-redis
REDIS_PORT=6379
REDIS_URL=redis://172.18.0.1:6379
Environment
Production
Browser
None
Variant
Self-hosted
Version
v2.1.0 (prime-cli),
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.