Trigger.dev before version 4.5.6 has a SQL injection flaw in its TSQL query compiler. The compiler concatenates window-function names directly into generated ClickHouse SQL without validation, allowing an authenticated customer to insert a backtick‑quoted identifier that injects a raw subquery outside the tenant‑specific WHERE clause. This flaw can lead to the exfiltration of analytics data belonging to other organizations, compromising the confidentiality of tenant data.

The vulnerability affects the Trigger.dev product from triggerdotdev, specifically all releases prior to version 4.5.6. Users of Trigger.dev who have not yet upgraded present an opportunity for exploitation.

The CVSS score of 8.3 indicates a high severity. The EPSS score is below 1%, suggesting a low but non‑zero likelihood of exploitation in the near term, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires an authenticated account with permission to POST /api/v1/query; once the backtick‑quoted identifier is supplied, the attacker can bypass the per‑tenant WHERE guard and run a subquery that reads data from other tenants’ tables.