CVE-2026-114065: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in triggerdotdev trigger.dev
Description
Trigger.dev versions before 4.7.3 have a tenant filtering bypass vulnerability that allows authenticated users to access data belonging to other tenants. This occurs via SQL injection using placeholder table syntax in the POST /api/v1/query endpoint, enabling attackers to bypass table allowlists and tenant filters to expose sensitive run metadata and payloads.
CVSS v4.0
Score 7.1high
Affected software
triggerdotdev
trigger.dev
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-114065 describes a vulnerability in trigger.dev prior to version 4.7.3 where authenticated users can exploit improper neutralization of special elements in SQL commands. By submitting queries with FROM {database.table} expressions, including in subqueries, attackers bypass tenant filtering and table allowlists. This allows unauthorized reading of other tenants' data, exposing run metadata and payloads. The vulnerability is classified as an SQL injection with a CVSS 4.0 score of 7.1 (high severity).
Potential Impact
Authenticated attackers can bypass tenant isolation controls and read data from other tenants, potentially exposing sensitive metadata and payload information related to trigger.dev runs. This compromises data confidentiality across tenants.
Mitigation Recommendations
Upgrade trigger.dev to version 4.7.3 or later, where this tenant filtering bypass vulnerability has been fixed. No other mitigation details are provided; applying the official fix is recommended.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-20T21:43:23.218Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad80c032cdf04f6568caa29
Added to database: 10/21/2026, 00:49:07 UTC
Last enriched: 10/21/2026, 01:33:26 UTC
Last updated: 10/21/2026, 01:33:26 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.