---
id: "CVE-2026-114072"
kind: "vulnerability"
aliases: ["CVE-2026-114072"]
title: "Trigger.dev: Slack OAuth flow lets attackers link their own workspace"
severity: "medium"
cvss: 5.3
epss: 0.00103
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["self-hosted", "slack", "trigger.dev", "vendor"]
not_affected_if: ["no-slack-integration", "version-4.5.12-or-later"]
published_at: "2026-10-21T01:17:31+00:00"
first_seen_at: "2026-10-23T21:57:27+00:00"
updated_at: "2026-10-25T04:22:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114072", "first_seen_at": "2026-10-23T21:57:27+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114072", "first_seen_at": "2026-10-24T13:15:55+00:00"}]
---

# Trigger.dev: Slack OAuth flow lets attackers link their own workspace

The Trigger.dev webapp before 4.5.12 uses the organization ID as the Slack OAuth state without tying it to the user's session, so it is open to cross-site request forgery. An attacker who knows a target organization ID can trick an logged-in member into connecting an attacker-controlled Slack workspace that then receives the organization's operational alerts.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Trigger.dev webapp version; affected if below `4.5.12`
- Review Slack integrations under the organization settings for workspaces nobody on the team recognizes

## Fix

- Upgrade the Trigger.dev webapp to `4.5.12` or later
- Remove any unrecognized Slack workspace from the organization's integrations

## Timeline

- 2026-10-23T21:57:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114072
- 2026-10-24T13:15:55+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114072

## From the sources

The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAuth flow, which uses the organization ID as the OAuth state without binding it to the initiating session. Attackers who know a target organization ID can trick an authenticated member into opening an unredeemed /integrations/slack/callback URL, connecting an attacker-controlled Slack workspace that may receive the organization's operational alerts.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_