2 matches found
CVE-2026-114066
Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own by supplying a foreign parentRunId to batch-creation endpoints. Attackers can send requests to POST /api/v3/batches or POST...
8.1CVSS0.00275EPSS
SaveExploits0References2
EUVD-2026-107017
Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own by supplying a foreign parentRunId to batch-creation endpoints. Attackers can send requests to POST /api/v3/batches or POST...
8.1CVSS5.9AI score0.00275EPSS
SaveExploits0References2
20