Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-85651 · CVE overview and exploitation status

EUVD-2026-71115

GHSA-r87q-rjwf-c49g

GHSA-qxpp-qjg8-x4jv

cve-program · CVE-2026-85651

• https://github.com/triggerdotdev/trigger.dev/issues/4173
• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2
• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-qxpp-qjg8-x4jv
• https://www.vulncheck.com/advisories/trigger-dev-before-4.5.2-unauthorized-environment-access-via-run-replay

euvd · EUVD-2026-71115

• https://github.com/triggerdotdev/trigger.dev/issues/4173
• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2
• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-qxpp-qjg8-x4jv
• https://www.vulncheck.com/advisories/trigger-dev-before-4.5.2-unauthorized-environment-access-via-run-replay

nvd · CVE-2026-85651

• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254
• https://github.com/triggerdotdev/trigger.dev/issues/4173
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2
• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-qxpp-qjg8-x4jv
• https://www.vulncheck.com/advisories/trigger-dev-before-4.5.2-unauthorized-environment-access-via-run-replay

osv · GHSA-qxpp-qjg8-x4jv

• https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-qxpp-qjg8-x4jv
• https://github.com/triggerdotdev/trigger.dev/pull/4199
• https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254
• https://github.com/triggerdotdev/trigger.dev
• https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2

No related changes are available here.