---
id: "CVE-2026-114091"
kind: "vulnerability"
aliases: ["CVE-2026-114091"]
title: "Trigger.dev: run replay route leaks other tenants' task payloads"
severity: "medium"
cvss: 6.0
epss: 0.00233
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["multi-tenant", "node.js", "package", "self-hosted", "trigger.dev"]
not_affected_if: ["single-tenant-deployment", "version-4.5.0-or-later"]
published_at: "2026-10-21T01:17:34+00:00"
first_seen_at: "2026-10-23T21:57:28+00:00"
updated_at: "2026-10-25T04:05:34+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114091", "first_seen_at": "2026-10-23T21:57:28+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114091", "first_seen_at": "2026-10-24T13:15:55+00:00"}]
---

# Trigger.dev: run replay route leaks other tenants' task payloads

Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the replay route, without scoping to the caller's environment. An attacker with any tenant's API key and a victim's run friendlyId can replay that run into their own environment and read the victim's task payload.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Trigger.dev version (`npx trigger.dev@latest --version` or the version in `package.json`) and confirm it is below `4.5.0`
- Confirm whether the self-hosted deployment serves the route `api.v1.runs.$runParam.replay`

## Fix

- Upgrade Trigger.dev to `4.5.0` or later
- Rotate API keys and secrets referenced in payloads of runs that may have been replayed across environments

## Timeline

- 2026-10-23T21:57:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114091
- 2026-10-24T13:15:55+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114091

## From the sources

Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the lookup to the caller's runtime environment. An attacker holding any tenant's API key who knows a victim's run friendlyId can replay that run into their own environment and read the victim's task payload.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_