CVE-2026-114070— Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records
Quick assessment
Affected
triggerdotdev trigger.dev
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Trigger.dev 4.5.0（4.6.0 之前的版本）中存在一个信息泄露漏洞。该漏洞位于仪表板代理（Dashboard Agent）的输入代理中，其将委托的用户代理令牌（user-actor token）存储于浏览器可读取的会话输入记录中。攻击者若持有聊天的公共会话令牌，即可通过读取“记录端点”（records endpoint），从 字段中提取该令牌，并对其进行重放攻击，以完成环境 JWT 交换。
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| triggerdotdev | trigger.dev | 4.5.0< 4.6.0 |
affected |
4.6.0 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-114070
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records
Source: CVE Program / CVE List V5
Vulnerability Description
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable session input records. Attackers holding a chat's public session token can read the in records endpoint to recover the token from payload.metadata.userActorToken and replay it for environment JWT exchange.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| triggerdotdev | trigger.dev | 4.5.0 ~ 4.6.0 | - |
|
II. Public POCs for CVE-2026-114070
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-114070
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-114070 (2)
Same Patch Batch · triggerdotdev · 2026-10-21 · 28 CVEs total
| CVE-2026-114089 | 8.8 HIGH | Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover |
| CVE-2026-114068 | 8.3 HIGH | Trigger.dev before 4.6.0 Missing Authorization via Waitpoint Token Wait Endpoint |
| CVE-2026-114083 | 8.1 HIGH | Trigger.dev before 4.5.0-rc.3 Path Traversal via Packets Presigned URL Endpoints |
| CVE-2026-114069 | 8.1 HIGH | Trigger.dev before 4.6.0 Root Secret Disclosure via envvars API Endpoint |
| CVE-2026-114087 | 8.1 HIGH | Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets |
| CVE-2026-114082 | 8.1 HIGH | Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials |
| CVE-2026-114066 | 8.1 HIGH | Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpoints |
| CVE-2026-114078 | 8.1 HIGH | Trigger.dev before 4.5.6 Cross-Organization Schedule Deletion via Unscoped friendlyId Look |
| CVE-2026-114085 | 7.9 HIGH | Trigger.dev through 4.7.6 Missing Authentication in Supervisor Workload API |
| CVE-2026-114084 | 7.7 HIGH | Trigger.dev before 4.5.6 SQL Injection via tags in Realtime Runs API |
| CVE-2026-114081 | 7.7 HIGH | Trigger.dev before 4.5.6 Cross-Tenant SQL Injection via TSQL Window-Function Name |
| CVE-2026-114077 | 7.1 HIGH | Trigger.dev before 4.5.6 Cross-Tenant Deployment Hijack via createDeploymentBackgroundWork |
| CVE-2026-114092 | 6.5 MEDIUM | Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action |
| CVE-2026-114088 | 6.5 MEDIUM | Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authentication Bypass via Socket.IO |
| CVE-2026-114067 | 6.5 MEDIUM | Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route |
| CVE-2026-114065 | 6.5 MEDIUM | Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholders |
| CVE-2026-114073 | 5.5 MEDIUM | Trigger.dev CLI before 4.5.9 Secret Exposure via Debug Deployment Logs |
| CVE-2026-114075 | 5.4 MEDIUM | Trigger.dev before 4.5.12 Authorization Bypass via Alert Channels API |
| CVE-2026-114076 | 5.4 MEDIUM | Trigger.dev before 4.5.2 Blind SSRF via Alert Channel Webhook URL |
| CVE-2026-114079 | 5.4 MEDIUM | Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: trigger.dev
-
CVE-2026-114093
Trigger.dev before 4.5.6 Cross-Site Request Forgery via /log -
CVE-2026-114092
Trigger.dev before 4.5.0 Missing Authentication in Dashboard -
CVE-2026-114091
Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure -
CVE-2026-114089
Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to P -
CVE-2026-114088
Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authen
Same vendor: triggerdotdev
-
CVE-2026-114093
Trigger.dev before 4.5.6 Cross-Site Request Forgery via /log -
CVE-2026-114092
Trigger.dev before 4.5.0 Missing Authentication in Dashboard -
CVE-2026-114091
Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disclosure -
CVE-2026-114089
Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to P -
CVE-2026-114088
Trigger.dev before 4.5.4 Hardcoded Coordinator Secret Authen
Same weakness: CWE-522
-
CVE-2026-111765
A2A Java SDK: Android synchronous POST forwards credentials -
CVE-2026-111763
A2A Java SDK send client credentials under server-controlled -
CVE-2026-112303
GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader -
CVE-2026-111927
Coder before 2.35.4 Credential Theft via Workspace Proxy Hos -
CVE-2026-104617
sdbootutil: qrencode invocation leaks PIN/recovery key in /p
V. Comments for CVE-2026-114070
No comments yet