01 Record

CVE-2026-73655

Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login

HighPUBLISHEDCNA: GitHub_M

Base score7.4 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

02 Description

Trigger.dev: Account Takeover via Cross-Provider OAuth Email Matching in Google Login

Published: 2026-08-13 19:53Z22 HR AGO
Last updated: 2026-08-13 19:53Z22 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 7.4)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses: CWE-287
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 08ce19f47bac77da388362e2eac184f335512a560eae9c228d7ed73946e365ff

VendorProductVersionsPlatforms

triggerdotdevtrigger.dev< 4.5.2—