Trigger.dev before version 4.5.6 is affected by a classic SQL injection flaw that occurs when the /realtime/v1/runs endpoint concatenates an unescaped tags query parameter into an ElectricSQL WHERE clause. The flaw defeats a tenant‑guard that limits access to a specific runtimeEnvironmentId, enabling the injection of arbitrary boolean conditions. Authenticated attackers who possess any project API key with the read:runs scope can therefore enumerate and retrieve TaskRun records, including payloads and metadata, from every organization that shares the same self‑hosted instance.

The vulnerable software is Trigger.dev’s Realtime Runs API under the triggerdotdev vendor. All installations using a version earlier than 4.5.6 are considered affected. No later versions are known to contain the bug.

The CVSS score of 8.3 signals a high‑severity flaw, and although the EPSS score is below 1%, the vulnerability is not considered uncommon. Because the exploitation path requires an authenticated API key with read:runs permission, the likelihood of abuse depends on the security posture of those keys. The flaw is not listed in the CISA KEV catalog, but it can still provide an attacker with cross‑tenant data leakage if the same instance hosts multiple organizations.