Vulnerability · Published Oct 21, 2026 · Assigned by VulnCheck

CVE-2026-114071Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route

Low 3.1

In plain English

A low-severity missing authorization in trigger.dev from triggerdotdev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)0.3%top 79.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim's waitpoint friendly ID can submit type=DATETIME or type=MANUAL with isTimeout to prematurely mark the pending waitpoint completed.

Affected products (as reported)

Vendor	Product	Versions
triggerdotdev	trigger.dev	0 – before 4.5.12

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

References

GitHub Security Advisory (GHSA-m8pr-xr7c-frh3) vendor-advisory
VulnCheck Advisory: Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route third-party-advisory