Trigger.dev: Path traversal in packets presigned URL endpoints

Summary

Trigger.dev, a platform for workflows and AI agents, contains a path traversal flaw in its packets API endpoints. An attacker with one valid secret API key for any environment can use ../ sequences in the filename to obtain presigned URLs for other tenants' objects. This allows reading or overwriting other tenants' run payloads and outputs, which may contain credentials and personal data. The GitHub advisory states that the flaw is exploitable in the static-credential object store configuration, which is the default for the bundled self-hosted stack.

Affected

• Trigger.dev up to and including 4.4.6 (GitHub advisory GHSA-gx7f-q62h-9fxp)
• Some third-party records list other ranges, for example up to 4.5.0-rc.2 or from 4.4.2 (see sources)

Fixed in

• Trigger.dev 4.5.0-rc.3 or later, according to the GitHub advisory
• A third-party record names 4.5.0-rc.5 as the fixed version, so prefer the newest available release

Workaround

Unknown. No vendor workaround was identified in the sources.

Exploitation

• Not known to be exploited in the wild. CISA SSVC lists exploitation as poc.
• The GitHub advisory describes a proof of concept that runs locally.
• Credited reporter: 5ud0er.

Our recommendation

• Upgrade to Trigger.dev 4.5.0-rc.3 or later, preferably the newest release.
• Rotate API keys held by untrusted or external parties.
• Review access logs of the packets endpoints for unusual filenames containing ../.
• If self-hosted, check the deployed image tag and whether static object store credentials are used.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• GitHub Security Advisory GHSA-gx7f-q62h-9fxp github.com
• VulnCheck advisory: Trigger.dev before 4.5.0-rc.3 path traversal www.vulncheck.com
• VulDB entry 423922 vuldb.com
• OpenCVE: CVE-2026-114083 app.opencve.io

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 07:24.