Payloadcms Plugin-Multi-Tenant vulnerabilities

CVE-2026-105860 [HIGH] CWE-862 Payload has a tenant authorization bypass in Multi-Tenant Plugin Payload has a tenant authorization bypass in Multi-Tenant Plugin ## Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. **You are affected if:** - You are using `@payloadcms/plugin-multi-tenant` If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership field, you are not affected by

CVE-2026-105864 [MEDIUM] CWE-863 CVE-2026-105864: Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-te Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in another tenant when at least one tenant-enabled collection exists. Reads and direct edits of existing document