---
id: "CVE-2026-114092"
kind: "vulnerability"
aliases: ["CVE-2026-114092"]
title: "Trigger.dev: unauthenticated run replay leaks payloads and reruns tasks"
severity: "high"
cvss: 8.3
epss: 0.00436
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["node.js", "package", "self-hosted", "trigger.dev"]
not_affected_if: ["managed-hosting"]
published_at: "2026-10-21T01:17:34+00:00"
first_seen_at: "2026-10-23T21:57:28+00:00"
updated_at: "2026-10-25T03:02:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114092", "first_seen_at": "2026-10-23T21:57:28+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114092", "first_seen_at": "2026-10-24T13:15:55+00:00"}]
---

# Trigger.dev: unauthenticated run replay leaks payloads and reruns tasks

Trigger.dev versions before 4.5.0 let anyone who knows a run's friendlyId replay that run into an environment the attacker chooses, because the dashboard replay route has no authentication or organization check. An attacker can read the victim's task payload or re-execute the task with the victim's secrets.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Trigger.dev version and confirm whether it is below `4.5.0`
- Confirm whether the dashboard is reachable from the internet or an untrusted network

## Fix

- Upgrade Trigger.dev to `4.5.0` or later
- Rotate secrets used by tasks if the dashboard was exposed while running an affected version (unknown whether the sources require this)

## Timeline

- 2026-10-23T21:57:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114092
- 2026-10-24T13:15:55+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114092

## From the sources

Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run replay route (resources.taskruns.$runParam.replay) and looks up the run by friendlyId alone. A remote attacker who knows a victim's run friendlyId can replay it into an environment of their choosing, exposing the victim's task payload or running the task again with the victim's secrets.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_