Executive brief
Trigger.dev is a platform for building and deploying durable workflows and AI agents. Versions before 4.5.2 fail to properly validate that authenticated users can only replay task runs within their own environments, allowing attackers to inject runs into other organizations' environments, consuming their resources and corrupting their run history.
Technical details
The vulnerability is an access control bypass in the run replay functionality. Trigger.dev fails to validate environment membership during run replay operations, allowing authenticated attackers to replay their own runs into arbitrary environments belonging to other organizations or projects. The attack requires valid authentication but does not require the attacker to have explicit access to the target environment. An authenticated attacker can exploit this to inject task runs, consume victim resources, and pollute run history. The vulnerability is fixed in version 4.5.2 and later.
Affected products
- Trigger.dev Trigger.dev before 4.5.2
Timeline
- 2026-09-04: disclosed
- 2026-07-09: patched: Security patch released; version 4.5.2 contains the fix