CVE-2026-114075
CVE-2026-114075 · Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy personal access token helper. Attackers with a read-only UAT can POST to the project alertChannels endpoint to create production webhook channels, routing future deployment and error alerts to attacker-controlled infrastructure.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
trigger.dev
- Versions
- ≥ 0, < 4.5.12: Affected (semver)
- 4.5.12: Not affected (semver)
Update to 4.5.12