CVE-2026-114071: Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route

Q: Who can exploit this issue?

An attacker must be an authenticated member of the same project and must know the target waitpoint's friendly ID. The issue affects waitpoints in the DEVELOPMENT environment belonging to another project member.

Q: What can an attacker do with a known waitpoint friendly ID?

They can prematurely complete a pending waitpoint by submitting a completion request with type=DATETIME or type=MANUAL and isTimeout. The reported impact is unauthorized modification of the waitpoint's completion state.

Q: Which versions are affected?

Trigger.dev versions before 4.5.12 are affected. Updating to 4.5.12 or later addresses the affected version range described in the advisory.

Published Oct 21, 2026

Updated

Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim's waitpoint friendly ID can submit type=DATETIME or type=MANUAL with isTimeout to prematurely mark the pending waitpoint completed.

Affected Software

1 affected component

Trigger.dev Trigger.dev<4.5.12

Event History

Oct 21, 2026

CVE Published

via MITRE·12:36 AM

Data Sourced

via MITRE·12:36 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be an authenticated member of the same project and must know the target waitpoint's friendly ID. The issue affects waitpoints in the DEVELOPMENT environment belonging to another project member.

What can an attacker do with a known waitpoint friendly ID?

They can prematurely complete a pending waitpoint by submitting a completion request with type=DATETIME or type=MANUAL and isTimeout. The reported impact is unauthorized modification of the waitpoint's completion state.

Which versions are affected?

Trigger.dev versions before 4.5.12 are affected. Updating to 4.5.12 or later addresses the affected version range described in the advisory.

CVE-2026-114071: Trigger.dev before 4.5.12 Authorization Bypass via Waitpoint Complete Route

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What can an attacker do with a known waitpoint friendly ID?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What can an attacker do with a known waitpoint friendly ID?

Which versions are affected?