CVE-2026-92773— Trigger.dev before 4.6.0 GitHub App Installation Takeover
Quick assessment
Affected
triggerdotdev trigger.dev
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential insta
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92773
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Trigger.dev before 4.6.0 GitHub App Installation Takeover
Source: CVE Program / CVE List V5
Vulnerability Description
Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining unauthorized access to the victim's repositories.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| triggerdotdev | trigger.dev | 0 ~ 4.6.0 | - |
|
II. Public POCs for CVE-2026-92773
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92773
请登录查看更多情报信息。
Other References for CVE-2026-92773 (4)
-
GitHub App installation-link takeover via missing installation-ownership verification · Advisory · triggerdotdev/trigger.dev · GitHub third-party-advisory vendor-advisory
-
Trigger.dev before 4.6.0 GitHub App Installation Takeover | Advisories | VulnCheck third-party-advisory
IV. Related Vulnerabilities
Same product: trigger.dev
-
CVE-2026-85650
Trigger.dev before 4.5.2 Server-Side Request Forgery via web -
CVE-2026-85651
Trigger.dev before 4.5.2 Unauthorized Environment Access via -
CVE-2026-73659
Trigger.dev: Cross-tenant object read/write via path travers -
CVE-2026-73658
Trigger.dev: Cross-tenant object store read and write via UR -
CVE-2026-73657
Trigger.dev: Cross-tenant payload poisoning via packet write
Same vendor: triggerdotdev
-
CVE-2026-85650
Trigger.dev before 4.5.2 Server-Side Request Forgery via web -
CVE-2026-85651
Trigger.dev before 4.5.2 Unauthorized Environment Access via -
CVE-2026-73659
Trigger.dev: Cross-tenant object read/write via path travers -
CVE-2026-73658
Trigger.dev: Cross-tenant object store read and write via UR -
CVE-2026-73657
Trigger.dev: Cross-tenant payload poisoning via packet write
Same weakness: CWE-639
-
CVE-2026-61596
djust has broken object-level access control (IDOR) -
CVE-2026-92588
n8n before 1.123.76 Improper Authorization via Source Contro -
CVE-2026-92577
AVideo through 29.0 API get_api_video Broken Access Control -
CVE-2026-92810
PrestaShop blockwishlist through 3.0.2 Information Disclosur -
CVE-2026-92809
PrestaShop psgdpr through 1.4.3 GDPR Log Forgery
V. Comments for CVE-2026-92773
No comments yet