CVE-2026-114085

Trigger.dev versions through 4.7.6 are vulnerable to a missing authentication flaw in the supervisor workload server. The root cause is a lack of ownership verification, allowing workloads to manipulate runs belonging to other deployments. An attacker with network access and a valid run/snapshot ...

EUVD-2026-106888

Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to manipulate runs belonging to other deployments without ownership verification. Attackers with network access and a valid run/snapshot pair can call the attempts/sta...