Vulnerability · Published Oct 21, 2026 · Assigned by VulnCheck

CVE-2026-114090Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server

High 7.1

In plain English

A high-severity missing authentication in cli-v3 from trigger.dev. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.2%top 85.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task, cancel-run, list-runs, and get-run-logs using the developer's stored access token.

Affected products (as reported)

Vendor	Product	Versions
trigger.dev	cli-v3	3.0.0 – before 4.5.4

Weakness: CWE-306 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

References

GitHub Security Advisory (GHSA-pqmg-rq46-vm4m) vendor-advisory
VulnCheck Advisory: Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server third-party-advisory