{"id":"CVE-2026-114068","kind":"vulnerability","aliases":["CVE-2026-114068"],"related":[],"title":"Trigger.dev: waitpoint endpoint lets any API key block other organizations' runs","description":"Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs belonging to other organizations. Attackers holding any secret API key can supply a victim run ID with their own waitpoint, causing that run to block indefinitely on a waitpoint the victim cannot complete, and can inject resume data into it.","summary":"Trigger.dev before 4.6.0 has a missing authorization check on its waitpoint token wait endpoint. An authenticated user with any secret API key can attach their own waitpoint to another organization's run, which then blocks indefinitely and accepts injected resume data.","severity":"high","cvss":8.3,"epss":0.00254,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["multi-tenant","package","self-hosted","trigger.dev"],"not_affected_if":["auth-required"],"how_to_check":"- Check the installed Trigger.dev version (`npx trigger.dev@latest --version` or the version in `package.json`) and confirm whether it is below `4.6.0`.\n- Unknown whether the sources list a self-hosted check beyond the version.","fix":"- Upgrade Trigger.dev to `4.6.0` or later.\n- Rotate secret API keys that may have been exposed to untrusted parties.","status":"open","published_at":"2026-10-21T01:17:30+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:02:15+00:00","updated_at":"2026-10-25T03:02:15+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:02:15Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Trigger.dev to `4.6.0` or later.\n- Rotate secret API keys that may have been exposed to untrusted parties.","reach":"internet","title":"Trigger.dev: waitpoint endpoint lets any API key block other organizations' runs","impact":"medium","summary":"Trigger.dev before 4.6.0 has a missing authorization check on its waitpoint token wait endpoint. An authenticated user with any secret API key can attach their own waitpoint to another organization's run, which then blocks indefinitely and accepts injected resume data.","category":"package","nicknames":[],"who_cares":["trigger.dev","self-hosted","multi-tenant"],"confidence":0.6,"needs_auth":"yes","worst_case":"Other organizations' runs get blocked and can receive attacker-injected resume data.","analyst_note":"Confirm the affected version range and whether hosted Trigger.dev cloud was patched; check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-114068 for the exact fixed version and any advisory.","how_to_check":"- Check the installed Trigger.dev version (`npx trigger.dev@latest --version` or the version in `package.json`) and confirm whether it is below `4.6.0`.\n- Unknown whether the sources list a self-hosted check beyond the version.","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"Teams running Trigger.dev before 4.6.0 with more than one organization or with API keys shared across trust boundaries are exposed, since the attacker needs a valid secret key of their own. Single-tenant deployments where every key holder is trusted have less exposure; the sources do not say more.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000656,"input_tokens":3394,"output_tokens":633,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-114068':14A,17A '-2026':13A,16A '4.6.0':28B,69C 'accept':63B 'allow':82C 'anoth':54B 'api':6A,46B,96C 'attach':49B 'attack':84C,92C 'authent':41B,83C 'author':32B,73C 'belong':88C 'block':8A,60B,86C,112C 'cannot':119C 'caus':108C 'check':33B 'complet':120C 'contain':70C 'cve':12A,15A 'data':66B,125C 'endpoint':3A,39B,80C 'hold':93C 'host':24B 'id':103C 'indefinit':61B,113C 'inject':64B,123C 'key':7A,47B,97C 'let':4A 'miss':31B,72C 'multi':19B 'multi-ten':18B 'organ':10A,55B,91C 'packag':21B 'resum':65B,124C 'run':11A,57B,87C,102C,110C 'secret':45B,95C 'self':23B 'self-host':22B 'suppli':99C 'tenant':20B 'token':37B,78C 'trigger.dev':1A,25B,26B,67C 'user':42B 'victim':101C,118C 'vulner':74C 'wait':38B,79C 'waitpoint':2A,36B,52B,77C,107C,116C","nicknames":[],"mitigations":[],"who_affected":"Teams running Trigger.dev before 4.6.0 with more than one organization or with API keys shared across trust boundaries are exposed, since the attacker needs a valid secret key of their own. Single-tenant deployments where every key holder is trusted have less exposure; the sources do not say more.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:30+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114068","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114068","severity":null,"published_at":"2026-10-21T01:17:30+00:00","modified_at":"2026-10-21T01:17:30+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114068","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114068","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}