Skip to content
OpenAdvisories

Product · triggerdotdev

trigger.dev

37 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-114071

    Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route

    Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim…

    triggerdotdev trigger.dev
  • Low 3.5
    CVE-2026-114070

    Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records

    Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable session input records. Attackers holding a chat's public session token can read the…

    triggerdotdev trigger.dev