{"id":"CVE-2026-114086","kind":"vulnerability","aliases":["CVE-2026-114086"],"related":[],"title":"Trigger.dev: unauthenticated POST injects data into run realtime streams","description":"Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allows unauthenticated attackers to inject data into run streams. Attackers can send POST requests to /realtime/v1/streams/:runId/:streamId with a predictable run friendlyId to inject arbitrary data into any environment's realtime stream, including production.","summary":"Trigger.dev before 4.5.5 has a missing authentication check on the realtime streams POST handler. An unauthenticated attacker who guesses a run friendlyId can inject arbitrary data into any environment's realtime stream, including production.","severity":"medium","cvss":6.9,"epss":0.00275,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["node","package","realtime","self-hosted","trigger.dev"],"not_affected_if":["managed-hosting","realtime-api-not-exposed","version-4.5.5-or-later"],"how_to_check":"- Check the installed Trigger.dev version with `npx trigger.dev@latest --version` or by reading the `@trigger.dev/sdk` version in `package.json`.\n- Confirm whether the self-hosted instance exposes the `/realtime/v1/streams/` route to the internet.","fix":"- Upgrade Trigger.dev to `4.5.5` or later.\n- Until the upgrade is done, restrict access to `/realtime/v1/streams/` at the proxy or network layer.","status":"open","published_at":"2026-10-21T01:17:33+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:40:13+00:00","updated_at":"2026-10-25T03:40:13+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:40:13Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Trigger.dev to `4.5.5` or later.\n- Until the upgrade is done, restrict access to `/realtime/v1/streams/` at the proxy or network layer.","reach":"internet","title":"Trigger.dev: unauthenticated POST injects data into run realtime streams","impact":"medium","summary":"Trigger.dev before 4.5.5 has a missing authentication check on the realtime streams POST handler. An unauthenticated attacker who guesses a run friendlyId can inject arbitrary data into any environment's realtime stream, including production.","category":"package","nicknames":[],"who_cares":["trigger.dev","self-hosted","realtime","node"],"confidence":0.6,"needs_auth":"no","worst_case":"Attackers inject arbitrary data into production run realtime streams","analyst_note":"Confirm whether managed cloud was affected and whether the vendor advisory names the patched SDK package; check the NVD page https://nvd.nist.gov/vuln/detail/CVE-2026-114086.","how_to_check":"- Check the installed Trigger.dev version with `npx trigger.dev@latest --version` or by reading the `@trigger.dev/sdk` version in `package.json`.\n- Confirm whether the self-hosted instance exposes the `/realtime/v1/streams/` route to the internet.","needs_analyst":true,"not_affected_if":["managed-hosting","version-4.5.5-or-later","realtime-api-not-exposed"],"who_is_affected":"Teams running a Trigger.dev version before 4.5.5 that serve the realtime streams API, most likely self-hosted instances reachable from the internet or untrusted networks. Teams on the managed cloud service or on 4.5.5 or later are not exposed by this flaw, as far as the sources say; confirm with the vendor if unsure.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000675,"input_tokens":3385,"output_tokens":673,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114086':12A,15A '-2026':11A,14A '/realtime/v1/streams':87C '4.5.5':25B,59C 'allow':72C 'arbitrari':47B,97C 'attack':39B,74C,81C 'authent':29B,63C 'check':30B 'contain':60C 'cve':10A,13A 'data':5A,48B,77C,98C 'environ':51B,101C 'friendlyid':44B,94C 'guess':41B 'handler':36B,70C 'host':21B 'includ':55B,105C 'inject':4A,46B,76C,96C 'miss':28B,62C 'node':16B 'packag':17B 'post':3A,35B,69C,84C 'predict':92C 'product':56B,106C 'realtim':8A,18B,33B,53B,67C,103C 'request':85C 'run':7A,43B,79C,93C 'runid':88C 'self':20B 'self-host':19B 'send':83C 'stream':9A,34B,54B,68C,80C,104C 'streamid':89C 'trigger.dev':1A,22B,23B,57C 'unauthent':2A,38B,73C 'vulner':64C","nicknames":[],"mitigations":[],"who_affected":"Teams running a Trigger.dev version before 4.5.5 that serve the realtime streams API, most likely self-hosted instances reachable from the internet or untrusted networks. Teams on the managed cloud service or on 4.5.5 or later are not exposed by this flaw, as far as the sources say; confirm with the vendor if unsure.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T01:17:33+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114086","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114086","severity":null,"published_at":"2026-10-21T01:17:33+00:00","modified_at":"2026-10-21T01:17:33+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114086","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114086","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}