{"id":"CVE-2026-114082","kind":"vulnerability","aliases":["CVE-2026-114082"],"related":[],"title":"Trigger.dev: session input flaw leaks stream credentials, allowing forged or deleted streams","description":"Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via session input initialization. Attackers can use the credential directly against the storage API to append, create, or trim other session and run streams, forging output or permanently deleting records.","summary":"Trigger.dev before 4.6.2 lets a holder of a public token with session write access obtain environment-wide S2 stream credentials through session input initialization. An attacker can use those credentials against the storage API to append, create, or trim other sessions' and runs' streams, forging output or permanently deleting records.","severity":"high","cvss":8.1,"epss":0.00275,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","self-hosted","trigger.dev","typescript"],"not_affected_if":["version-4.6.2-or-later"],"how_to_check":"- Check the installed Trigger.dev version (for example `npx trigger.dev@latest --version` or the version in `package.json`) and see whether it is below `4.6.2`\n- unknown for other checks; the sources do not describe configuration details","fix":"- Upgrade Trigger.dev to `4.6.2` or later\n- unknown for credential rotation; the sources do not say whether S2 stream credentials issued before the upgrade should be rotated","status":"open","published_at":"2026-10-21T01:17:32+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:05:57+00:00","updated_at":"2026-10-25T03:05:57+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:05:57Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Trigger.dev to `4.6.2` or later\n- unknown for credential rotation; the sources do not say whether S2 stream credentials issued before the upgrade should be rotated","reach":"internet","title":"Trigger.dev: session input flaw leaks stream credentials, allowing forged or deleted streams","impact":"high","summary":"Trigger.dev before 4.6.2 lets a holder of a public token with session write access obtain environment-wide S2 stream credentials through session input initialization. An attacker can use those credentials against the storage API to append, create, or trim other sessions' and runs' streams, forging output or permanently deleting records.","category":"package","nicknames":[],"who_cares":["trigger.dev","self-hosted","typescript"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker forges or permanently deletes other sessions' and runs' stream records","analyst_note":"Confirm the affected version range and whether hosted Trigger.dev Cloud was affected, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-114082.","how_to_check":"- Check the installed Trigger.dev version (for example `npx trigger.dev@latest --version` or the version in `package.json`) and see whether it is below `4.6.2`\n- unknown for other checks; the sources do not describe configuration details","needs_analyst":true,"not_affected_if":["version-4.6.2-or-later"],"who_is_affected":"Teams that run self-hosted Trigger.dev before 4.6.2 and expose public tokens with session write access. The sources do not say which deployment modes beyond that are affected, and the unknown items above cover what they leave out.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000648,"input_tokens":3362,"output_tokens":624,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-114082':15A,18A '-2026':14A,17A '4.6.2':27B,78C 'access':38B,92C 'allow':8A,84C 'api':59B,114C 'append':61B,116C 'attack':51B,105C 'author':81C 'contain':79C 'creat':62B,117C 'credenti':7A,45B,55B,100C,109C 'cve':13A,16A 'delet':11A,74B,129C 'direct':110C 'environ':41B,96C 'environment-wid':40B,95C 'flaw':4A 'forg':9A,70B,125C 'holder':30B,88C 'host':22B 'initi':49B,104C 'input':3A,48B,103C 'leak':5A 'let':28B 'obtain':39B,94C 'output':71B,126C 'packag':19B 'perman':73B,128C 'public':33B,86C 'public-token':85C 'record':75B,130C 'run':68B,123C 's2':43B,98C 'self':21B 'self-host':20B 'session':2A,36B,47B,66B,90C,102C,121C 'storag':58B,113C 'stream':6A,12A,44B,69B,99C,124C 'token':34B,87C 'trigger.dev':1A,23B,25B,76C 'trim':64B,119C 'typescript':24B 'use':53B,107C 'via':101C 'vulner':82C 'wide':42B,97C 'write':37B,91C","nicknames":[],"mitigations":[],"who_affected":"Teams that run self-hosted Trigger.dev before 4.6.2 and expose public tokens with session write access. The sources do not say which deployment modes beyond that are affected, and the unknown items above cover what they leave out.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:32+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114082","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114082","severity":null,"published_at":"2026-10-21T01:17:32+00:00","modified_at":"2026-10-22T18:17:27+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114082","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114082","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}