---
id: "CVE-2026-114068"
kind: "vulnerability"
aliases: ["CVE-2026-114068"]
title: "Trigger.dev: waitpoint endpoint lets any API key block other organizations' runs"
severity: "high"
cvss: 8.3
epss: 0.00254
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["multi-tenant", "package", "self-hosted", "trigger.dev"]
not_affected_if: ["auth-required"]
published_at: "2026-10-21T01:17:30+00:00"
first_seen_at: "2026-10-23T21:57:27+00:00"
updated_at: "2026-10-25T03:02:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114068", "first_seen_at": "2026-10-23T21:57:27+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114068", "first_seen_at": "2026-10-24T13:15:55+00:00"}]
---

# Trigger.dev: waitpoint endpoint lets any API key block other organizations' runs

Trigger.dev before 4.6.0 has a missing authorization check on its waitpoint token wait endpoint. An authenticated user with any secret API key can attach their own waitpoint to another organization's run, which then blocks indefinitely and accepts injected resume data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Trigger.dev version (`npx trigger.dev@latest --version` or the version in `package.json`) and confirm whether it is below `4.6.0`.
- Unknown whether the sources list a self-hosted check beyond the version.

## Fix

- Upgrade Trigger.dev to `4.6.0` or later.
- Rotate secret API keys that may have been exposed to untrusted parties.

## Timeline

- 2026-10-23T21:57:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114068
- 2026-10-24T13:15:55+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114068

## From the sources

Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs belonging to other organizations. Attackers holding any secret API key can supply a victim run ID with their own waitpoint, causing that run to block indefinitely on a waitpoint the victim cannot complete, and can inject resume data into it.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_