Description
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigned S3 write URLs. End users can overwrite their own session's durable chat snapshot to forge the agent's conversation history, since the route lacks a secret-key-only check.
Published: 2026-10-21
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Public session token holders can acquire presigned S3 write URLs and overwrite agent conversation history
Action: Apply Patch
AI Analysis

Impact

Trigger.dev versions 4.5.0 through 4.6.1 expose an authorization flaw in the PUT snapshot-url session endpoint. The route omits a secret‑key‑only check, allowing anyone possessing a public session token to obtain a presigned S3 write URL for that session. With that URL an attacker can overwrite the durable chat snapshot, effectively forging the agent’s conversation history and manipulating stored data

Affected Systems

The vulnerability affects Trigger.dev, product trigger.dev, version 4.5.0 up to 4.6.1 inclusive. All deployments using these releases and accepting public session tokens are impacted

Risk and Exploitability

The CVSS score of 7.1 indicates a high impact and a considerable level of difficulty for exploitation, with an EPSS score of less than 1% suggesting low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Attackers who can create or acquire a public session token are able to exploit the flaw by issuing a PUT request to the snapshot‑url endpoint and retrieving the presigned URL, after which they can submit an S3 PUT to overwrite the snapshot

Generated by OpenCVE AI on October 21, 2026 at 16:17 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade trigger.dev to version 4.6.2 or later
  • Revoke existing public session tokens and enforce secret‑key‑only checks for the snapshot‑url endpoint
  • Block unauthenticated PUT requests to the snapshot‑url route using a firewall or reverse proxy

Generated by OpenCVE AI on October 21, 2026 at 16:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 22 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Oct 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Triggerdotdev
Triggerdotdev trigger.dev
Vendors & Products Triggerdotdev
Triggerdotdev trigger.dev

Wed, 21 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Description Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigned S3 write URLs. End users can overwrite their own session's durable chat snapshot to forge the agent's conversation history, since the route lacks a secret-key-only check.
Title Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Route
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Triggerdotdev Trigger.dev
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-22T17:55:46.386Z

Reserved: 2026-10-20T21:43:23.218Z

Link: CVE-2026-114067

cve-icon Vulnrichment

Updated: 2026-10-22T17:55:21.101Z

cve-icon NVD

Status : Deferred

Published: 2026-10-21T01:17:30.250

Modified: 2026-10-22T18:17:27.520

Link: CVE-2026-114067

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T10:42:02Z

Weaknesses