CVE-2026-114093

Versions of Trigger.dev prior to 4.5.6 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability involving the GET-based /logout endpoint . A remote attacker can trick an authenticated user into clicking an obfuscated, URL-encoded link, which triggers an automatic logout. This action re...