CERT24CVE-2026-114089 — Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT TakeoverLoading data…
CERT24Threat Observatory
Period

CVE-2026-114089 — Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover

Trigger.dev versions before 4.5.2 contain a cross-site request forgery (CSRF) vulnerability in the CLI authorization-code flow. Loading the authorization-code URL mints a Personal Access Token (PAT) without user consent, and the token can be retrieved from an unauthenticated API endpoint.

← Back to intelligence

CVE-2026-114089 — Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leading to PAT Takeover

Trigger.dev versions before 4.5.2 contain a cross-site request forgery (CSRF) vulnerability in the CLI authorization-code flow. Loading the authorization-code URL mints a Personal Access Token (PAT) without user consent, and the token can be retrieved from an unauthenticated API endpoint.