{"id":"CVE-2026-114072","kind":"vulnerability","aliases":["CVE-2026-114072"],"related":[],"title":"Trigger.dev: Slack OAuth flow lets attackers link their own workspace","description":"The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAuth flow, which uses the organization ID as the OAuth state without binding it to the initiating session. Attackers who know a target organization ID can trick an authenticated member into opening an unredeemed /integrations/slack/callback URL, connecting an attacker-controlled Slack workspace that may receive the organization's operational alerts.","summary":"The Trigger.dev webapp before 4.5.12 uses the organization ID as the Slack OAuth state without tying it to the user's session, so it is open to cross-site request forgery. An attacker who knows a target organization ID can trick an logged-in member into connecting an attacker-controlled Slack workspace that then receives the organization's operational alerts.","severity":"medium","cvss":5.3,"epss":0.00103,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["self-hosted","slack","trigger.dev","vendor"],"not_affected_if":["no-slack-integration","version-4.5.12-or-later"],"how_to_check":"- Check the installed Trigger.dev webapp version; affected if below `4.5.12`\n- Review Slack integrations under the organization settings for workspaces nobody on the team recognizes","fix":"- Upgrade the Trigger.dev webapp to `4.5.12` or later\n- Remove any unrecognized Slack workspace from the organization's integrations","status":"open","published_at":"2026-10-21T01:17:31+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T04:22:23+00:00","updated_at":"2026-10-25T04:22:23+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-25T04:22:23Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade the Trigger.dev webapp to `4.5.12` or later\n- Remove any unrecognized Slack workspace from the organization's integrations","reach":"internet","title":"Trigger.dev: Slack OAuth flow lets attackers link their own workspace","impact":"low","summary":"The Trigger.dev webapp before 4.5.12 uses the organization ID as the Slack OAuth state without tying it to the user's session, so it is open to cross-site request forgery. An attacker who knows a target organization ID can trick an logged-in member into connecting an attacker-controlled Slack workspace that then receives the organization's operational alerts.","category":"vendor","nicknames":[],"who_cares":["trigger.dev","self-hosted","slack"],"confidence":0.7,"needs_auth":"yes","worst_case":"Organization alerts get routed to an attacker-controlled Slack workspace","analyst_note":"","how_to_check":"- Check the installed Trigger.dev webapp version; affected if below `4.5.12`\n- Review Slack integrations under the organization settings for workspaces nobody on the team recognizes","needs_analyst":false,"not_affected_if":["version-4.5.12-or-later","no-slack-integration"],"who_is_affected":"Teams running a self-hosted or cloud Trigger.dev webapp older than 4.5.12 that use the organization-level Slack integration. Exposure requires an authenticated member to open an attacker-supplied callback link. Teams not using the Slack integration, or already on 4.5.12 or later, can skip it.","user_interaction":"yes","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.00063,"input_tokens":3413,"output_tokens":578,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114072':13A,16A '-2026':12A,15A '/integrations/slack/callback':139C '4.5.12':27B,90C 'alert':85B,155C 'attack':6A,56B,74B,123C,144C 'attacker-control':73B,143C 'authent':133C 'bind':117C 'connect':71B,141C 'contain':91C 'control':75B,145C 'cross':51B,94C 'cross-sit':50B,93C 'cve':11A,14A 'flow':4A,106C 'forgeri':54B,97C 'host':19B 'id':31B,62B,111C,129C 'initi':121C 'know':58B,125C 'let':5A 'level':103C 'link':7A 'log':67B 'logged-in':66B 'may':149C 'member':69B,134C 'oauth':3A,35B,105C,114C 'open':48B,136C 'oper':84B,154C 'organ':30B,61B,82B,102C,110C,128C,152C 'organization-level':101C 'receiv':80B,150C 'request':53B,96C 'self':18B 'self-host':17B 'session':44B,122C 'site':52B,95C 'slack':2A,20B,34B,76B,104C,146C 'state':36B,115C 'target':60B,127C 'tie':38B 'trick':64B,131C 'trigger.dev':1A,21B,24B,87C 'unredeem':138C 'url':140C 'use':28B,108C 'user':42B 'vendor':22B 'vulner':98C 'webapp':25B,88C 'without':37B,116C 'workspac':10A,77B,147C","nicknames":[],"mitigations":[],"who_affected":"Teams running a self-hosted or cloud Trigger.dev webapp older than 4.5.12 that use the organization-level Slack integration. Exposure requires an authenticated member to open an attacker-supplied callback link. Teams not using the Slack integration, or already on 4.5.12 or later, can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:31+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114072","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114072","severity":null,"published_at":"2026-10-21T01:17:31+00:00","modified_at":"2026-10-22T18:17:27+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114072","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114072","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}