---
id: "CVE-2026-114080"
kind: "vulnerability"
aliases: ["CVE-2026-114080"]
title: "Trigger.dev: alert webhooks let project members reach internal addresses"
severity: "medium"
cvss: 5.3
epss: 0.00275
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["node", "runtime", "self-hosted", "trigger.dev"]
not_affected_if: ["fixed-version"]
published_at: "2026-10-21T01:17:32+00:00"
first_seen_at: "2026-10-23T21:57:27+00:00"
updated_at: "2026-10-25T04:22:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114080", "first_seen_at": "2026-10-23T21:57:27+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114080", "first_seen_at": "2026-10-24T13:15:55+00:00"}]
---

# Trigger.dev: alert webhooks let project members reach internal addresses

Trigger.dev before 4.5.2 does not validate alert-channel webhook URLs, so an authenticated project member can point an alert at loopback, internal, or cloud metadata addresses. The server then sends requests to those targets, letting an attacker probe internal services and send signed POST requests.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the running Trigger.dev version against `4.5.2`; anything lower is affected
- Review who holds project membership in self-hosted Trigger.dev instances

## Fix

- Upgrade Trigger.dev to `4.5.2` or later
- Until upgraded, restrict alert-channel creation to trusted project members

## Timeline

- 2026-10-23T21:57:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114080
- 2026-10-24T13:15:55+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114080

## From the sources

Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the server send requests by setting unvalidated alert-channel webhook URLs. Attackers can create alert channels pointing to loopback, internal, or cloud metadata addresses, then trigger alerts to probe internal service reachability and send signed POST requests.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_