Vulnerability · Published Oct 21, 2026 · Assigned by VulnCheck
CVE-2026-114067Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route
Medium 6.5
In plain English
A medium-severity incorrect authorization in trigger.dev from triggerdotdev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 76.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigned S3 write URLs. End users can overwrite their own session's durable chat snapshot to forge the agent's conversation history, since the route lacks a secret-key-only check.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| triggerdotdev | trigger.dev | 4.5.0 – before 4.6.2 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N