{"id":"CVE-2026-114076","kind":"vulnerability","aliases":["CVE-2026-114076"],"related":[],"title":"Trigger.dev: webhook alert URL lets tenants reach internal hosts","description":"Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make the webapp server send POST requests to internal hosts by setting an unvalidated webhook alert channel URL. Attackers can point the webhook at internal services or cloud metadata addresses and trigger alerts to scan internal hosts, send state-changing POSTs, or reach IMDSv1 via redirects.","summary":"Trigger.dev before 4.5.2 does not validate the webhook alert channel URL, so an authenticated tenant can make the webapp server send POST requests to internal hosts. An attacker can use this to probe internal services, send state-changing requests, or reach cloud instance metadata via redirects.","severity":"medium","cvss":5.4,"epss":0.00235,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cloud-metadata","package","self-hosted","trigger.dev","webapp"],"not_affected_if":["managed-hosting","version-4.5.2-or-later"],"how_to_check":"- Check the installed Trigger.dev version in the webapp deployment, for example by reading the `version` in the `package.json` of the deployed app, and confirm whether it is below `4.5.2`.\n- Review whether tenants can create webhook alert channels in your instance.","fix":"- Upgrade Trigger.dev to `4.5.2` or later.\n- Until upgraded, restrict who can create alert webhook channels and block the webapp server's outbound access to internal hosts and cloud metadata addresses.","status":"open","published_at":"2026-10-21T01:17:31+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T04:14:40+00:00","updated_at":"2026-10-25T04:14:40+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T04:14:40Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Trigger.dev to `4.5.2` or later.\n- Until upgraded, restrict who can create alert webhook channels and block the webapp server's outbound access to internal hosts and cloud metadata addresses.","reach":"internet","title":"Trigger.dev: webhook alert URL lets tenants reach internal hosts","impact":"medium","summary":"Trigger.dev before 4.5.2 does not validate the webhook alert channel URL, so an authenticated tenant can make the webapp server send POST requests to internal hosts. An attacker can use this to probe internal services, send state-changing requests, or reach cloud instance metadata via redirects.","category":"package","nicknames":[],"who_cares":["trigger.dev","self-hosted","webapp","cloud-metadata"],"confidence":0.6,"needs_auth":"yes","worst_case":"Webapp server sends requests to internal hosts and cloud metadata","analyst_note":"Confirm whether webhook alert channels are enabled by default and which exact upgrade or advisory page states the fix version, using the NVD entry.","how_to_check":"- Check the installed Trigger.dev version in the webapp deployment, for example by reading the `version` in the `package.json` of the deployed app, and confirm whether it is below `4.5.2`.\n- Review whether tenants can create webhook alert channels in your instance.","needs_analyst":true,"not_affected_if":["managed-hosting","version-4.5.2-or-later"],"who_is_affected":"Self-hosted Trigger.dev instances running a version before 4.5.2 where authenticated tenants can configure webhook alert channels. The webapp server must have network access to internal services or metadata endpoints for the impact to be meaningful. Teams using Trigger.dev Cloud or instances already on 4.5.2 or later can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000674,"input_tokens":3404,"output_tokens":668,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114076':12A,15A '-2026':11A,14A '4.5.2':27B,74C 'address':118C 'alert':3A,33B,104C,121C 'allow':85C 'attack':52B,107C 'authent':38B,86C 'blind':77C 'chang':63B,129C 'channel':34B,105C 'cloud':17B,67B,116C 'cloud-metadata':16B 'contain':75C 'cve':10A,13A 'forgeri':82C 'host':9A,22B,50B,98C,125C 'imdsv1':133C 'instanc':68B 'intern':8A,49B,58B,97C,113C,124C 'let':5A 'make':41B,89C 'metadata':18B,69B,117C 'packag':19B 'point':109C 'post':46B,94C,130C 'probe':57B 'reach':7A,66B,132C 'redirect':71B,135C 'request':47B,64B,81C,95C 'scan':123C 'self':21B 'self-host':20B 'send':45B,60B,93C,126C 'server':44B,79C,92C 'server-sid':78C 'servic':59B,114C 'set':100C 'side':80C 'state':62B,128C 'state-chang':61B,127C 'tenant':6A,39B,87C 'trigger':120C 'trigger.dev':1A,23B,25B,72C 'unvalid':102C 'url':4A,35B,106C 'use':54B 'valid':30B 'via':70B,134C 'vulner':83C 'webapp':24B,43B,91C 'webhook':2A,32B,103C,111C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Trigger.dev instances running a version before 4.5.2 where authenticated tenants can configure webhook alert channels. The webapp server must have network access to internal services or metadata endpoints for the impact to be meaningful. Teams using Trigger.dev Cloud or instances already on 4.5.2 or later can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:31+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114076","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114076","severity":null,"published_at":"2026-10-21T01:17:31+00:00","modified_at":"2026-10-21T01:17:31+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114076","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114076","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}