{"id":"CVE-2026-114080","kind":"vulnerability","aliases":["CVE-2026-114080"],"related":[],"title":"Trigger.dev: alert webhooks let project members reach internal addresses","description":"Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the server send requests by setting unvalidated alert-channel webhook URLs. Attackers can create alert channels pointing to loopback, internal, or cloud metadata addresses, then trigger alerts to probe internal service reachability and send signed POST requests.","summary":"Trigger.dev before 4.5.2 does not validate alert-channel webhook URLs, so an authenticated project member can point an alert at loopback, internal, or cloud metadata addresses. The server then sends requests to those targets, letting an attacker probe internal services and send signed POST requests.","severity":"medium","cvss":5.3,"epss":0.00275,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["node","runtime","self-hosted","trigger.dev"],"not_affected_if":["fixed-version"],"how_to_check":"- Check the running Trigger.dev version against `4.5.2`; anything lower is affected\n- Review who holds project membership in self-hosted Trigger.dev instances","fix":"- Upgrade Trigger.dev to `4.5.2` or later\n- Until upgraded, restrict alert-channel creation to trusted project members","status":"open","published_at":"2026-10-21T01:17:32+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T04:22:20+00:00","updated_at":"2026-10-25T04:22:20+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-25T04:22:20Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Trigger.dev to `4.5.2` or later\n- Until upgraded, restrict alert-channel creation to trusted project members","reach":"internet","title":"Trigger.dev: alert webhooks let project members reach internal addresses","impact":"medium","summary":"Trigger.dev before 4.5.2 does not validate alert-channel webhook URLs, so an authenticated project member can point an alert at loopback, internal, or cloud metadata addresses. The server then sends requests to those targets, letting an attacker probe internal services and send signed POST requests.","category":"runtime","nicknames":[],"who_cares":["trigger.dev","self-hosted","node"],"confidence":0.6,"needs_auth":"yes","worst_case":"Server sends requests to internal services and metadata endpoints","analyst_note":"","how_to_check":"- Check the running Trigger.dev version against `4.5.2`; anything lower is affected\n- Review who holds project membership in self-hosted Trigger.dev instances","needs_analyst":false,"not_affected_if":["fixed-version"],"who_is_affected":"Self-hosted Trigger.dev deployments running a version before 4.5.2 that have alert channels available to project members. The risk is highest where the server can reach internal networks or cloud metadata endpoints. Instances on a fixed version, or with no untrusted users in projects, are less exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000598,"input_tokens":3385,"output_tokens":518,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114080':12A,15A '-2026':11A,14A '4.5.2':24B,70C 'address':9A,48B,111C 'alert':2A,29B,41B,95C,102C,114C 'alert-channel':28B,94C 'allow':81C 'attack':59B,99C 'authent':35B,82C 'blind':73C 'channel':30B,96C,103C 'cloud':46B,109C 'contain':71C 'creat':101C 'cve':10A,13A 'forgeri':78C 'host':20B 'intern':8A,44B,61B,107C,117C 'let':4A,57B 'loopback':43B,106C 'make':86C 'member':6A,37B,84C 'metadata':47B,110C 'node':16B 'point':39B,104C 'post':66B,123C 'probe':60B,116C 'project':5A,36B,83C 'reach':7A 'reachabl':119C 'request':53B,67B,77C,90C,124C 'runtim':17B 'self':19B 'self-host':18B 'send':52B,64B,89C,121C 'server':50B,75C,88C 'server-sid':74C 'servic':62B,118C 'set':92C 'side':76C 'sign':65B,122C 'target':56B 'trigger':113C 'trigger.dev':1A,21B,22B,68C 'unvalid':93C 'url':32B,98C 'valid':27B 'vulner':79C 'webhook':3A,31B,97C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Trigger.dev deployments running a version before 4.5.2 that have alert channels available to project members. The risk is highest where the server can reach internal networks or cloud metadata endpoints. Instances on a fixed version, or with no untrusted users in projects, are less exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114080","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114080","severity":null,"published_at":"2026-10-21T01:17:32+00:00","modified_at":"2026-10-21T16:17:30+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114080","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114080","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}