Executive brief
Trigger.dev is a platform for building and deploying AI agents and workflows. A server-side request forgery (SSRF) vulnerability in the alert channel feature allows authenticated organization members to create webhook URLs that target internal services and metadata endpoints, enabling the server to make unauthorized POST requests to restricted resources on the internal network.
Technical details
Trigger.dev before version 4.5.2 contains an SSRF vulnerability in the webhook alert channel delivery URL handling. The vulnerability exists because webhook URLs are fetched and POST requests are issued without proper URL validation or SSRF protection mechanisms. Authenticated users with organization membership can exploit this by configuring alert channels with URLs pointing to internal services (e.g., metadata endpoints, internal APIs). This allows an attacker to leverage the server to send requests to restricted internal resources that would normally be unreachable from the external network. The fix was released in version 4.5.2.
Affected products
- Trigger.dev Trigger.dev before 4.5.2
Timeline
- 2026-09-04: disclosed
- 2026-07-09: patched: Version 4.5.2 released with security fix