01 Record

CVE-2026-73657

Trigger.dev: Cross-tenant payload poisoning via packet write + replay

MediumPUBLISHEDCNA: GitHub_M

Base score4.2 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

02 Description

Trigger.dev: Cross-tenant payload poisoning via packet write + replay

Published: 2026-08-13 21:15Z21 HR AGO
Last updated: 2026-08-13 21:15Z21 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 4.2)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Weaknesses: CWE-22 CWE-345 CWE-639
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 83cf66a785298a089770659a29923fbe94be82e00ab561e16f7916f52fa8d43a

VendorProductVersionsPlatforms

triggerdotdevtrigger.dev>= 4.4.2, < 4.5.0-rc.4—