NPM: Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)

NPM: Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution IDOR vulnerability discovered by ? in WordPress Npm trigger.dev versions = 4.5.1...

Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)

Summary The dashboard replay action authorizes the source run it must belong to the caller's org, but the target environment for the replayed run is taken verbatim from the request body and is never checked for org or project membership. The environment lookup used by the replay path filters by i...