Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
12 vulnerabilities by triggerdotdev
CVE-2026-73659 (GCVE-0-2026-73659)
Vulnerability from nvd – Published: 2026-08-13 21:19 – Updated: 2026-08-14 16:18
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API
Summary
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/<projectRef>/<env>/ object-store prefix and enabling a project API key to read or overwrite another organization's offloaded task payloads and outputs on multi-organization self-hosted instances. This issue is fixed in version 4.5.0.
Severity
8.1 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 16:18 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/3830 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 4.4.2, < 4.5.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73659",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:18:14.876834Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:18:51.359Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.2, \u003c 4.5.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/\u003cprojectRef\u003e/\u003cenv\u003e/ object-store prefix and enabling a project API key to read or overwrite another organization\u0027s offloaded task payloads and outputs on multi-organization self-hosted instances. This issue is fixed in version 4.5.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T21:19:48.451Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/3830",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/3830"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0"
}
],
"source": {
"advisory": "GHSA-m3mf-37q7-8928",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73659",
"datePublished": "2026-08-13T21:19:48.451Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-14T16:18:51.359Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73658 (GCVE-0-2026-73658)
Vulnerability from nvd – Published: 2026-08-13 21:16 – Updated: 2026-08-14 16:30
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-tenant object store read and write via URL path traversal
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while apps/webapp/app/routes/api.v1.packets.$.ts accepts params["*"] without rejecting dot segments and uses findResource: async () => 1 without per-resource ownership validation. WHATWG path normalization collapses .. segments before signing, allowing a caller with a valid environment API key to obtain presigned URLs for another tenant's object-store keys and read or overwrite task payloads. This issue is fixed in version 4.5.0-rc.5.
Severity
8.2 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 16:29 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/3830 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 4.4.2, < 4.5.0-rc.5
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73658",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:29:49.410317Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:30:13.661Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.2, \u003c 4.5.0-rc.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while apps/webapp/app/routes/api.v1.packets.$.ts accepts params[\"*\"] without rejecting dot segments and uses findResource: async () =\u003e 1 without per-resource ownership validation. WHATWG path normalization collapses .. segments before signing, allowing a caller with a valid environment API key to obtain presigned URLs for another tenant\u0027s object-store keys and read or overwrite task payloads. This issue is fixed in version 4.5.0-rc.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T21:16:59.110Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/3830",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/3830"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.5"
}
],
"source": {
"advisory": "GHSA-888c-px7m-736v",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-tenant object store read and write via URL path traversal"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73658",
"datePublished": "2026-08-13T21:16:59.110Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-14T16:30:13.661Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73657 (GCVE-0-2026-73657)
Vulnerability from nvd – Published: 2026-08-13 21:15 – Updated: 2026-08-13 21:15
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-tenant payload poisoning via packet write + replay
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses `prisma.taskRun.findUnique({ where: { friendlyId: runParam } })` without a runtimeEnvironmentId filter, then ReplayTaskRunService in apps/webapp/app/v3/services/replayTaskRun.server.ts replays the selected run in the victim environment. Any valid environment API key can therefore replay another tenant's run by friendlyId, consuming victim resources and repeating side effects; when `payloadType: "application/store"` is used, overrideExistingPayloadPacket() calls conditionallyImportPacket() on existingTaskRun.payload without an integrity check, so payload bytes overwritten through a separate object-store path-traversal vulnerability become attacker-controlled input to the victim task. This issue is fixed in version 4.5.0-rc.4.
Severity
4.2 (Medium)
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/3756 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 4.4.2, < 4.5.0-rc.4
|
{
"containers": {
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.2, \u003c 4.5.0-rc.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses `prisma.taskRun.findUnique({ where: { friendlyId: runParam } })` without a runtimeEnvironmentId filter, then ReplayTaskRunService in apps/webapp/app/v3/services/replayTaskRun.server.ts replays the selected run in the victim environment. Any valid environment API key can therefore replay another tenant\u0027s run by friendlyId, consuming victim resources and repeating side effects; when `payloadType: \"application/store\"` is used, overrideExistingPayloadPacket() calls conditionallyImportPacket() on existingTaskRun.payload without an integrity check, so payload bytes overwritten through a separate object-store path-traversal vulnerability become attacker-controlled input to the victim task. This issue is fixed in version 4.5.0-rc.4."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T21:15:13.982Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-jx48-qfwm-xq67",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-jx48-qfwm-xq67"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/3756",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/3756"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/e1950778e2f2007e2d432b8f8a8fc89531c51f19",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/e1950778e2f2007e2d432b8f8a8fc89531c51f19"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.4"
}
],
"source": {
"advisory": "GHSA-jx48-qfwm-xq67",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-tenant payload poisoning via packet write + replay"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73657",
"datePublished": "2026-08-13T21:15:13.982Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-13T21:15:13.982Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73656 (GCVE-0-2026-73656)
Vulnerability from nvd – Published: 2026-08-13 19:56 – Updated: 2026-08-14 18:08
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-project deployment worker registration can modify another project's deployment state
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWorkerV4.server.ts, where workerDeployment.findFirst() selects a deployment by friendlyId without an environmentId predicate. A caller with a valid API key for one project can submit another project's deployment identifier, link an attacker-owned background worker to the victim deployment, and move the victim deployment from BUILDING to DEPLOYING. This issue is fixed in version 4.5.6.
Severity
9.9 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 17:39 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/4199 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
< 4.5.2
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73656",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T17:39:26.480979Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T18:08:12.877Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003c 4.5.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWorkerV4.server.ts, where workerDeployment.findFirst() selects a deployment by friendlyId without an environmentId predicate. A caller with a valid API key for one project can submit another project\u0027s deployment identifier, link an attacker-owned background worker to the victim deployment, and move the victim deployment from BUILDING to DEPLOYING. This issue is fixed in version 4.5.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:56:04.286Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-j6vv-pq9h-f4wj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-j6vv-pq9h-f4wj"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/4199",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/4199"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2"
}
],
"source": {
"advisory": "GHSA-j6vv-pq9h-f4wj",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-project deployment worker registration can modify another project\u0027s deployment state"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73656",
"datePublished": "2026-08-13T19:56:04.286Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-14T18:08:12.877Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73655 (GCVE-0-2026-73655)
Vulnerability from nvd – Published: 2026-08-13 19:53 – Updated: 2026-08-13 19:53
VLAI
EPSS
VEX
Title
Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts without requiring Google's email_verified assertion. When existingEmailUser && !existingUser is true, the flow writes the new Google authIdentifier into the existing email-matched account and returns that user object, allowing an attacker-controlled Google profile with an unverified matching email to take over the account. This issue is fixed in version 4.5.2.
Severity
7.4 (High)
CWE
- CWE-287 - Improper Authentication
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/4199 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
< 4.5.2
|
{
"containers": {
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003c 4.5.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts without requiring Google\u0027s email_verified assertion. When existingEmailUser \u0026\u0026 !existingUser is true, the flow writes the new Google authIdentifier into the existing email-matched account and returns that user object, allowing an attacker-controlled Google profile with an unverified matching email to take over the account. This issue is fixed in version 4.5.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:53:50.490Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-rp8c-h4xr-w9qv",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-rp8c-h4xr-w9qv"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/4199",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/4199"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2"
}
],
"source": {
"advisory": "GHSA-rp8c-h4xr-w9qv",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73655",
"datePublished": "2026-08-13T19:53:50.490Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-13T19:53:50.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73654 (GCVE-0-2026-73654)
Vulnerability from nvd – Published: 2026-08-13 19:29 – Updated: 2026-08-14 16:34
VLAI
EPSS
VEX
Title
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operation.key).set(newMetadata, value) in packages/core/src/v3/runMetadata/operations.ts without rejecting dangerous constructor and prototype path segments. A caller with a normal environment API key can pollute Object.prototype in the shared webapp process, corrupting Prisma queries and Prometheus labels, breaking other tenants' worker authentication, and causing a process-wide denial of service. This issue is fixed in version 4.5.6.
Severity
8.5 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 16:33 UTC
CWE
- CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/4316 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 3.3.8, < 4.5.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73654",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:33:32.438291Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:34:05.435Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.3.8, \u003c 4.5.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operation.key).set(newMetadata, value) in packages/core/src/v3/runMetadata/operations.ts without rejecting dangerous constructor and prototype path segments. A caller with a normal environment API key can pollute Object.prototype in the shared webapp process, corrupting Prisma queries and Prometheus labels, breaking other tenants\u0027 worker authentication, and causing a process-wide denial of service. This issue is fixed in version 4.5.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1321",
"description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:29:05.537Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/4316",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/4316"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.6"
}
],
"source": {
"advisory": "GHSA-p28v-f755-9qrg",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Prototype pollution via run metadata operations \u2192 process-wide cross-tenant DoS"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73654",
"datePublished": "2026-08-13T19:29:05.537Z",
"dateReserved": "2026-08-13T14:04:09.604Z",
"dateUpdated": "2026-08-14T16:34:05.435Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73659 (GCVE-0-2026-73659)
Vulnerability from cvelistv5 – Published: 2026-08-13 21:19 – Updated: 2026-08-14 16:18
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API
Summary
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/<projectRef>/<env>/ object-store prefix and enabling a project API key to read or overwrite another organization's offloaded task payloads and outputs on multi-organization self-hosted instances. This issue is fixed in version 4.5.0.
Severity
8.1 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 16:18 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/3830 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 4.4.2, < 4.5.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73659",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:18:14.876834Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:18:51.359Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.2, \u003c 4.5.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and generatePresignedRequest in apps/webapp/app/v3/objectStore.server.ts, allowing .. traversal to escape the packets/\u003cprojectRef\u003e/\u003cenv\u003e/ object-store prefix and enabling a project API key to read or overwrite another organization\u0027s offloaded task payloads and outputs on multi-organization self-hosted instances. This issue is fixed in version 4.5.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T21:19:48.451Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-m3mf-37q7-8928"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/3830",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/3830"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0"
}
],
"source": {
"advisory": "GHSA-m3mf-37q7-8928",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73659",
"datePublished": "2026-08-13T21:19:48.451Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-14T16:18:51.359Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73658 (GCVE-0-2026-73658)
Vulnerability from cvelistv5 – Published: 2026-08-13 21:16 – Updated: 2026-08-14 16:30
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-tenant object store read and write via URL path traversal
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while apps/webapp/app/routes/api.v1.packets.$.ts accepts params["*"] without rejecting dot segments and uses findResource: async () => 1 without per-resource ownership validation. WHATWG path normalization collapses .. segments before signing, allowing a caller with a valid environment API key to obtain presigned URLs for another tenant's object-store keys and read or overwrite task payloads. This issue is fixed in version 4.5.0-rc.5.
Severity
8.2 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 16:29 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/3830 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 4.4.2, < 4.5.0-rc.5
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73658",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:29:49.410317Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:30:13.661Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.2, \u003c 4.5.0-rc.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl() and Aws4FetchClient.presign() in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while apps/webapp/app/routes/api.v1.packets.$.ts accepts params[\"*\"] without rejecting dot segments and uses findResource: async () =\u003e 1 without per-resource ownership validation. WHATWG path normalization collapses .. segments before signing, allowing a caller with a valid environment API key to obtain presigned URLs for another tenant\u0027s object-store keys and read or overwrite task payloads. This issue is fixed in version 4.5.0-rc.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T21:16:59.110Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-888c-px7m-736v"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/3830",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/3830"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/db4074df54db06b0656becf3f974345c90fa202e"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.5"
}
],
"source": {
"advisory": "GHSA-888c-px7m-736v",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-tenant object store read and write via URL path traversal"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73658",
"datePublished": "2026-08-13T21:16:59.110Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-14T16:30:13.661Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73657 (GCVE-0-2026-73657)
Vulnerability from cvelistv5 – Published: 2026-08-13 21:15 – Updated: 2026-08-13 21:15
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-tenant payload poisoning via packet write + replay
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses `prisma.taskRun.findUnique({ where: { friendlyId: runParam } })` without a runtimeEnvironmentId filter, then ReplayTaskRunService in apps/webapp/app/v3/services/replayTaskRun.server.ts replays the selected run in the victim environment. Any valid environment API key can therefore replay another tenant's run by friendlyId, consuming victim resources and repeating side effects; when `payloadType: "application/store"` is used, overrideExistingPayloadPacket() calls conditionallyImportPacket() on existingTaskRun.payload without an integrity check, so payload bytes overwritten through a separate object-store path-traversal vulnerability become attacker-controlled input to the victim task. This issue is fixed in version 4.5.0-rc.4.
Severity
4.2 (Medium)
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/3756 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 4.4.2, < 4.5.0-rc.4
|
{
"containers": {
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.4.2, \u003c 4.5.0-rc.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, `POST /api/v1/runs/:runParam/replay` in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses `prisma.taskRun.findUnique({ where: { friendlyId: runParam } })` without a runtimeEnvironmentId filter, then ReplayTaskRunService in apps/webapp/app/v3/services/replayTaskRun.server.ts replays the selected run in the victim environment. Any valid environment API key can therefore replay another tenant\u0027s run by friendlyId, consuming victim resources and repeating side effects; when `payloadType: \"application/store\"` is used, overrideExistingPayloadPacket() calls conditionallyImportPacket() on existingTaskRun.payload without an integrity check, so payload bytes overwritten through a separate object-store path-traversal vulnerability become attacker-controlled input to the victim task. This issue is fixed in version 4.5.0-rc.4."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T21:15:13.982Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-jx48-qfwm-xq67",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-jx48-qfwm-xq67"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/3756",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/3756"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/e1950778e2f2007e2d432b8f8a8fc89531c51f19",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/e1950778e2f2007e2d432b8f8a8fc89531c51f19"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.0-rc.4"
}
],
"source": {
"advisory": "GHSA-jx48-qfwm-xq67",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-tenant payload poisoning via packet write + replay"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73657",
"datePublished": "2026-08-13T21:15:13.982Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-13T21:15:13.982Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73656 (GCVE-0-2026-73656)
Vulnerability from cvelistv5 – Published: 2026-08-13 19:56 – Updated: 2026-08-14 18:08
VLAI
EPSS
VEX
Title
Trigger.dev: Cross-project deployment worker registration can modify another project's deployment state
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWorkerV4.server.ts, where workerDeployment.findFirst() selects a deployment by friendlyId without an environmentId predicate. A caller with a valid API key for one project can submit another project's deployment identifier, link an attacker-owned background worker to the victim deployment, and move the victim deployment from BUILDING to DEPLOYING. This issue is fixed in version 4.5.6.
Severity
9.9 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 17:39 UTC
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/4199 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
< 4.5.2
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73656",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T17:39:26.480979Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T18:08:12.877Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003c 4.5.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1/deployments/:deploymentId/background-workers calls CreateDeploymentBackgroundWorkerServiceV4.call() in apps/webapp/app/v3/services/createDeploymentBackgroundWorkerV4.server.ts, where workerDeployment.findFirst() selects a deployment by friendlyId without an environmentId predicate. A caller with a valid API key for one project can submit another project\u0027s deployment identifier, link an attacker-owned background worker to the victim deployment, and move the victim deployment from BUILDING to DEPLOYING. This issue is fixed in version 4.5.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "CWE-639: Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:56:04.286Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-j6vv-pq9h-f4wj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-j6vv-pq9h-f4wj"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/4199",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/4199"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2"
}
],
"source": {
"advisory": "GHSA-j6vv-pq9h-f4wj",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Cross-project deployment worker registration can modify another project\u0027s deployment state"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73656",
"datePublished": "2026-08-13T19:56:04.286Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-14T18:08:12.877Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73655 (GCVE-0-2026-73655)
Vulnerability from cvelistv5 – Published: 2026-08-13 19:53 – Updated: 2026-08-13 19:53
VLAI
EPSS
VEX
Title
Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts without requiring Google's email_verified assertion. When existingEmailUser && !existingUser is true, the flow writes the new Google authIdentifier into the existing email-matched account and returns that user object, allowing an attacker-controlled Google profile with an unverified matching email to take over the account. This issue is fixed in version 4.5.2.
Severity
7.4 (High)
CWE
- CWE-287 - Improper Authentication
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/4199 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
< 4.5.2
|
{
"containers": {
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003c 4.5.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy() in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser() in apps/webapp/app/models/user.server.ts without requiring Google\u0027s email_verified assertion. When existingEmailUser \u0026\u0026 !existingUser is true, the flow writes the new Google authIdentifier into the existing email-matched account and returns that user object, allowing an attacker-controlled Google profile with an unverified matching email to take over the account. This issue is fixed in version 4.5.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287: Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:53:50.490Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-rp8c-h4xr-w9qv",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-rp8c-h4xr-w9qv"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/4199",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/4199"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2"
}
],
"source": {
"advisory": "GHSA-rp8c-h4xr-w9qv",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73655",
"datePublished": "2026-08-13T19:53:50.490Z",
"dateReserved": "2026-08-13T14:04:09.605Z",
"dateUpdated": "2026-08-13T19:53:50.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-73654 (GCVE-0-2026-73654)
Vulnerability from cvelistv5 – Published: 2026-08-13 19:29 – Updated: 2026-08-14 16:34
VLAI
EPSS
VEX
Title
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Summary
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operation.key).set(newMetadata, value) in packages/core/src/v3/runMetadata/operations.ts without rejecting dangerous constructor and prototype path segments. A caller with a normal environment API key can pollute Object.prototype in the shared webapp process, corrupting Prisma queries and Prometheus labels, breaking other tenants' worker authentication, and causing a process-wide denial of service. This issue is fixed in version 4.5.6.
Severity
8.5 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 16:33 UTC
CWE
- CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/triggerdotdev/trigger.dev/secu… | x_refsource_CONFIRM |
| https://github.com/triggerdotdev/trigger.dev/pull/4316 | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/comm… | x_refsource_MISC |
| https://github.com/triggerdotdev/trigger.dev/rele… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| triggerdotdev | trigger.dev |
Affected:
>= 3.3.8, < 4.5.6
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-73654",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T16:33:32.438291Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T16:34:05.435Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "trigger.dev",
"vendor": "triggerdotdev",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.3.8, \u003c 4.5.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPath(operation.key).set(newMetadata, value) in packages/core/src/v3/runMetadata/operations.ts without rejecting dangerous constructor and prototype path segments. A caller with a normal environment API key can pollute Object.prototype in the shared webapp process, corrupting Prisma queries and Prometheus labels, breaking other tenants\u0027 worker authentication, and causing a process-wide denial of service. This issue is fixed in version 4.5.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1321",
"description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-13T19:29:05.537Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-p28v-f755-9qrg"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/pull/4316",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/pull/4316"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/commit/6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/commit/6997aeb05e27d2db47f9eda01fdc8a17c81a1ae0"
},
{
"name": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.6"
}
],
"source": {
"advisory": "GHSA-p28v-f755-9qrg",
"discovery": "UNKNOWN"
},
"title": "Trigger.dev: Prototype pollution via run metadata operations \u2192 process-wide cross-tenant DoS"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-73654",
"datePublished": "2026-08-13T19:29:05.537Z",
"dateReserved": "2026-08-13T14:04:09.604Z",
"dateUpdated": "2026-08-14T16:34:05.435Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}